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Description • . . . - 

TECHNICAL FIELD 

5 The present invention relates to an information recording medium for recording information signal containing pro- 

gram data, audio information and video information, an information reproducing device for reproducing the information 
recorded in the information recording medium and a method for reproducing the information. 

^^BAC^GROUND ART 

10 . *^- v . • - . *.'..■ 

A floppy disk v and a CD-ROM (Compact Disk-Read Only Memory) are conventionally known as an information 
- recording medium for program data, audio information and video information. In particular, the CD-ROM is widely used 
for the distribution of varioussoftwares because of its large capacity of more than 600 MB and low production -cost. 
On the other hand, the promotion of high speed of a personal computer in recent years has increased the demand 
is for outputting video and audio data (hereinafter, referred to as AV data) on the personal computer. For example, a digital 
data file where data is compressed by video image compression system called MPEG 1. .(Moving picture Experts 
Group) is recorded on CD-ROM, and an application for distributing such a CD-ROM has been increasingly available. 
However, since the MPEG 1 system "generally compresses video data which requires a large capacity at a high com- 
pression ratio, quality. of. video images is significantly degraded. Therefore, the MPE<3 1 is unsuitable for.use where high 
do quality in video images is required, such as movies or the like. . 

In recent years, development for recording high quality video data on an optical disk having a large capacity close 
to 5 GB, using a higher performance video image compression system called MPEG 2 system has been pursued. Cap- 
italizing on the large capacity, the optical disk called DVD (Digital Video Disk) can record high quality digital AV data for 
two hours or more, and thus greatly expected as an AV data recording medium of the next generation. On the other 
25 hand, the DVD is expected to allow for reproduction of high quality AV data on a personal computer by a DVD drive for 
reproducing DVD in connection to the personal computer. In addition, the DVD is expected as an. information recording 
medium substituting for the CD-ROM as a medium -for ^ disfributing ca^ulator software. r 

- However; when the DVD drive as a peripheral, device ..of the personal computer is commercially available, digital 
data recorded in the DVD is output to the personal computer, and easily.copied on a rewriting type medium such as a 
30 hard disk and an MO (Magneto-Optical Disk). Easy copying of the digital AV data causes problems such as illegal cop- 
ying of the AV data recorded in the DVD without the permission of the copyright holder and distribution of altered AV 
data. This makes it extremely difficult to protect the copyright. This brings about a disadvantage not only to the copyright 
holder of the data, but also possibly to users in the case where the copyright holder sets the' price in view of unauthor- 
ized copies being made, or does not produce disks for fear, of alteration of the data. Hereinafter, Yhe problem described 
35 above is referred to as a first problem. V -...=■; - z ,--\ \ , 

On the other hand, as uses for the information recording medium where the AV. data is recorded, a variety of uses 
are considered. In.some uses among these uses, the fact that the information recording medium can bereproduced in 
any reproducing device causes a problem: In such a use,, it is preferable to differentiate a reproducing device capable" 
of reproducing and a reproducing device-incapable of reproducing. For example, for disks generally called "karaoke" 
40 disks where video data including words corresponding to reproduced music is recorded, there exist two types of dis*<s: 
disks privately used in households (hereinafter! referred ,to as consumer disks) and disks used in a facility such as\ 
where customers enjoy karaoke for a predetermined charge, (hereinafter, referred to as industrial disks). Since the 
industrial disks are produced under the.premise that they.are supplied in a large quantity to limited users, they are sup- 
plied at a low price. On the other hand,, consumer disks are,sc>ldat a high price due to individual sale. 
45 However, in the case where the industrial disks and the consumer disks have entirely the same format, there is a 

possibility of selling the industrial disks as the consumer disks at low price in. the consumer market. This prevents the 
consumer disks from being distributed in a proper price jn the market, thus resulting in a disadvantage for disk manu- 
facturers and users who purchase the consumer disks through the normal route. Therefore, it is desirable to differenti- 
ate the reproducing device capable of reproducing the consumer disks from that capable of reproducing industrial disks 
so in such a use. For another example, a disk having the content which causes an ethical problem may be reproduced. 
The criterion which determines whether or not the disk is.ethical is varied from country to t country. Therefore, a disk to 
be reproduced in a certain country may not be desired to be reproduced in another country. Therefore, a mechanism is 
required which allows a disk which causes an ethical problem to be reproduced only in a specific country where the sale 
thereof is permitted. As described above, there has been a problem that the reproducing device capable of reproduction 
55. and the reproducing device incapable of reproduction cannpt be differentiated depending on the use. Hereinafter, this 
problem is referred to as a second problem. 

As one means for solving the two aforementioned problems, there is a method of scrambling (encrypting) data to 
be recorded in the information recording ;disk for recording. More specif icaily, regarding the first problem, at the time of 
a copying operation in the personal computer, .data scrambled based on a key is transmitted back/ and a key for 
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descrambling is not transmitted back, thus preventing the copying operation (the copying operation is performed, but 
since the descrambling is not effected, the copying operation makes no sense). 

Furithfirnrore;' regarding the second problem, it is possible to classify a device capable of descrambling and a device 
incapabiSBPtesfcrambling by producing disks which are differently scrambled depending on the contents of the disks. 
5 Thus, trei^Simbling (encrypting) of the recorded data is eimSwe on the two aforementioned problems. However, 
another problenris-a method for descrambling data or how t^speeify a*key for descrambling data. ' 

As a first conventional example for encrypting in a data field", a system of recording an encrypting key in a main data 
field of a sector different from an encrypted data sector was proposed in a CD-ROM in Figure 3 of Japanese Laid-Open 
Patent Publication No. 7-249264. In this conventional example, data reproduction is realized by recording encrypted 
w data and an encrypting key thereof in the CD-ROM at the time of recording, and decrypting the encrypted data after 
executing a reading command of the encrypting key from a personal computer to a reproducing device' at the time of 
reproducing. This method has an advantage in that the encrypting key canTDe easily 'changed. 

Furthermore, as a second conventional example, as shown in Figure 3 of Japanese Laid Open Patent Publication 
No. 7-85574, a system of recording an encrypting key in-an area in a disk which the optical head of the reproducing 
ts devi^dSfessnot scatfwas proposed. In this conventional example,; since the encrypting key is prevented from being 
readifrom^tgEneral p'ersonal computer, the ericryptirt|pS5^^ in a copying operation, and thus an illegal cop- 

ying 6pe?3tion T makes 4 no sense. 

' However, since the encrypting key of the first conventidharexampfe is recorded in the main data field of the sector, 
it is possible to easily read the' encrypting key used aithetimfe of recording the disk frorn a general personal computer. 
20 Therefore, since users can read the encrypting key and the encrypted data, it is highly possible to decrypt the encrypt- 
ing. ' :: * ' ' *- , ' ' " •'• ; " ' • * :i ' ' : - 1 : ' 

Furthermore; in the second conventional example, the encrypting key-is recorded in the area which the optical head 
of the reproducing device does not scan. In order to read the encrypting key, therefore, reading means dedicated to 
reading the encrypting key is required', in addition to reading means for reading data from the data recorded area, thus 
25 causing a problem. * s ■ '■ : ^ ' 

The present invention has an objective of providing an information recording medium having a data structure which 
ensure? theprevention of the content recorded in^&.ttifopmatibrt medium from being illegally copied so as to 

v re&r&e^lciiret copyright protection, an inforrnW^^iS6femg deivice cabable-of reproducing data from the informa- 
tiori^dfSmg medium without providing a speciMf^re^ solving thefirst and second problems, and 

30 a method for reproducing information. ' ' i ,; ~ * ■:**-• 1 

DISCLOSURE OF THE INVENTION ■ vv • ,.s -vc:, 

An information recording medium according to -the 1 present invention includes a lead-in area and a data recording 
35 area. Key information is recorded in the lead-in area. Scrambled data is recorded in the data recording area. The scram- 
- bleddataisdescrambledbafsedonthekey informiaftibn; ^ ; ^ 

j According to another aspect of the invention, 7 an trifbrmation recording medium includes a lead-in area and a data 
' recording area. First key information is recorded in the lead-in area; Second key information arid scrambled data are 
recorded.in the data recording area. Ttie scrambled data-is descrambled based on information obtained by converting 
40 :the second key information based on the first key ihlforfr^Kon. 5 r ' f - - * 

In brie embodiment of the ihventibn, : the : diita^ is divided into a plurality of sectors. Each of the plural- 

ity of sectbrsincludes a sectdr header field where ihfbrrhatroh lor identifying the sector is recorded and amain date field 
where the scrambled data is recorded. The second' key Irtfbrmation is recdrded in the sector header field. 

In another embodiment of the invention, the seborid key IhTdrnl^tiorT is encrypted by the first key information, and 
45 the information ' ' ' ' ' 

In still another embodiment of the invention", the f irst keyirifbrmatibn is encrypted by master key information. 
In yet another embodiment of the invention, a pltiralrty eif f irst key* information is recorded in the lead-in area, and 
the plurality of first key information are encrypted by a plurality of different master key information. 

In another embodiment of the invention, a scrambled flag "for indicating whether or not data recorded in the data 
so ^recording area is scrambled is farther' recorded in the Information recording medium. < ■ ' 

^ms^lfcanother Embodiment of the irwenttaftlito^ is divided into -a plurality of sectorsr -Each of 

^theplui&nty -of sectdfs includes a sector header field where information for identifying the sector is recorded ndf^Rxiain 
data field where theWamSletfbata is recorded. 1liescf£mble f lafr isreebrded ih the sector header field. i 

In yet another embodiment' of the invention, Vie data recordm#aFea includes ah area where a plurality of files are 
55 recorded and a file management area where informatibh for managing thepluralrty of files is recorded, and the scramble 
flag is recorded in the file management area. i>: 

In another embodiment of the invention, mutuaf authentication keyinformation for performing mutual authentication 
between a reading device for reading ttie scrarttoled data and a decoding ! d^ce including a descramble circuit for 
descrambling the scrambled data is further reborded in ; the lead : in area. - < 
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In still another embodiment of the invention, the information, is an initial value for generating a random number 
sequence, and the scrambled data is descrambled by performing a logical operation to the random number sequence. 

In yet anotherembodiment of the invention, the data recording area is divided into a plurality of sectors. Each of the 
plurality of sectors includes a sector header field where information for identifying the sector is recorded and a main 
s . data field where the scrambled data is recorded. Information for identifying use of the information recording medium is 
recorded in the sector header field. 

According to another aspect of the. invention,. an information reproducing device includes a reading circuit for read- 
ing scrambled data and key information to be used for descrambling the scrambled data from an information recording 
medium; and an authentication circuit for authenticating to transmit information corresponding to the key .information to 
10 the decoding device before transmitting the scrambled data to the decoding device including a descramble circuit for 
descrambling the scrambled data. 

In one embodiment of the invention, the information recording medium includes a lead-in area and a data recording 
area. Key information includes first key information recorded in the. lead-in area and second key information recorded 
in the data recording area. 

is According to another aspect of the invention, an. information reproducing device includes an authentication circuit 
for authenticating to receive information corresponding to key information from a reading device before receiving scram- 
bled data from the reading device for reading the scrambled data and the key information to be used for descrambling 
the scrambled data from an information recording.medium;-and a descramble circuit for descrambling the scrambled 
data received from the reading device. 

20 In one embodiment of the invention, .the information recording medium includes a lead-in .area and a data recording 
area. The key information includes first key information recorded in the lead-in area and second key information 
recorded in the data recording area. - ' : 

In another embodiment of the invention, the descramble circuit descrambles the scrambled data based on informa- 
. . tion obtained by converting the second key information based on the first key information. 

25 According to another aspect of the invention, an information reproducing device includes a reading circuit for read- 
ing scrambled data and key information to be.used for descrambling the scrambled data from an information recording 
medium; a decoding section including a descramble circuit for .descrambling the scrambled data; and an authentication 
circuit for authenticating to transmit information corresponding to the key information to the decoding section before 
transmitting the scrambled data to the decoding section. - , 

30 In one embodiment of the invention, the information recording medium includes a lead-in area and a data recording 
area. The key information includes first key information recorded in the lead-in. area and second key information 
recorded in the data recording area. 

In another embodiment of the invention, the descramble circuit descrambles the scrambled data based on informa- 
tion obtained by converting the second key information based on the first key information. . ■ . ; 

35 In still another embodiment of the invention, a scramble flag for indicating whether or not data recorded in the data 
recording area is scrambled is further recorded in the information recording medium. The information reproducing 
device further includes a control circuit for controlling whether or not the authentication circuit is to be activated depend- 
ing on the scramble flag. - . - . . * 
1 In yet another embodiment of the invention, authentication^ the. authentication circuit is performed by using a pre- 

40 determined function. 

In another embodiment of the invention, aiuthentication by the authentication circuit is performed by using informa- 
tion changing over time: \7 . •' - , 

In still another embodiment of the invention, the authentication circuit generates bus key information in the case 
where authentication processing is normally ended.: and encrypts the first key information and the second key informa- 
45 tion using the bus key information. - *. ■ ■ h „ - > 

In yet another embodiment of the invention, the authentication circuit decrypts the encrypted first key information 
and the encrypted second key information encrypted using .the bus key information. 

According to another aspect of the invention, an information reproduction method for reproducing scrambled data 
using a reading device for reading scrambled data and the key information to be used for descrambling the scrambled 
so data from an information recording medium and a decoding device including a descramble circuit for descrambling the 
scrambled data includes the steps of performing mutual authentication processing between the reading device and the 
decoding device; generating bus key information common to the reading device and the decoding device in the case 
where the mutual authentication processing is normally ended between the reading device and the decoding device; 
encrypting the key information in accordance with the bus key information; and transmitting the encrypted key informa- 
55 tion from the reading device to the decoding device. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a view showing a data structure of an information recording medium according to the present invention. 
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Portions (a) and (b) of Figure 2 are views showing the structure of scramble information recorded in a lead-in area 
of the information recording medium shown in Figure 1, 

Figure 3 is a view showing another data structure of an information recording medium according to the present 
invention. _•• ; - . / ; v , • " * 

5 Figure 4 is a block diagram showing a structure of an information reproducing device according to the present 

invention. 1 

Figure 5 is a block diagram showing another structure of; an information reproducing device according to the 
present invention. '< • " ■ • '* • ' ■ . 

Figure 6 is a block diagram showing still anotherrstructure of an information reproducing device according to the 
io present invention: - v • * r *' - ; r ' 

Figure 7 is a block diagram showing yet another structure of an information reproducing device according to the 
present invention. • * 

Figure 8 is a block diagram showing another structure of an information reproducing device according to the 
present invention. 

is Portions (a> to (c) of Figure 9 are views showing; an exemplary scramble-processing method. 

Portions (a) to (f)of Figure 10 are views showinga data structure of . an information recording medium according to 
the present invention; -t -■" ■ * * ' 

Portions (a) to (c) of Figure 11 are-views showing a data structure of a directory recording in a volume-file manage- 
ment area. ' ' 
20 Portion (d) of Figure 11 iis a view showing a data structure of a scramble information sector. 

P6rtron(6)of Figure 11 is a view showing a data ^structure of a scrambled settor. ^ - ** ■ 

Portion (f) of Figure 11 is a view showing a data structure of a non-scramble information sector: 
Portions (a) to (c) of Figure 12 are views showing an exemplary scramble system. ^ 
Portions (a) to (c) of Figure 13 are views showing a data structure of a directory recording in a volume-file manage- 
rs mentarea. ~ - - ''""*■ 

Portion (d) of Figure 13 is a view showing adata structure of a scramble information sector. ' . , 
Portion (e) of Figure 13 is a view showing^data structure of a scrambled sector: 
7 ' Portion (!) of Figure '13 is a view showing a* data structure of a nomscrambled sector. , . ■..-<. 

Figure 1 4 is a block diagram showing a structure of an information reproducing device 500 according to the present 
30 invention. - ' ■ *' ' - [ ~ ->" ■ <'■'-- " - ' *;"..' 

Figure 1 5 is a block diagram showing a structure of an optical.disk drive 509 included in the information reproducing 
device 500. 

Figure 1 6 is a block diagram showing a structure of an AV decoder card 507 included in the information reproducing 
device 500. ' n 

35 - ' Figure 17 is a blockdiagram showing a structure 6f an information reproducing device 800 according to the present 
invention. % — •' *' " ■ <•<-:..■'■ •:• - > 

Figure 18 is a block diagram showing a structure of an SCSI control circuit incorporated AV decoder card 801 
included in the information reproducing device 800. 

Figure 19 is a block diagram showing a structure of an information reproducing device (optical disk player) 1000 
40 according to the present invention. 

' Figure 20 is a block diagram showing a structure of a descramble circuit 1 106: r 

Figure 21 is a flow chart showing a procedure of a descramble-processing executed by the descramble circuit 

Figure 22 iis a block diagram showing a structure of a descramble circuit -1 308. 
45 Figure 23 is a flow chart showing a procedure of a descramble-processing executed by the descramble circuit 
. 1308. - • •< : " *- ; ' 

Figure 24 is a block diagram showing a structure of a decoder authentication circuit 601 . i 
Figure 25 is a blockdiagram showing a structure of a drive authentication circuit 701.. 

Figure 26 is a flow chart illustrating mutual authentication processing between the optical disk drive 509 and the AV 
so decoder card 507 or the SCSI control .circuit incorporated AV decoder card:801. 

BEST MODE FOR CARRYING OUT THE INVENTION v ^ -v..."* 

" ■ * Hereinafter, the present invention will be described by way of embodiments with reference to the accompanying 
55 drawings. ' . • ' ;«■/■.■ 

(First Embodiment) : • . * ; ?: 'v 

Figure 1 shows a data structure of an information recording medium according to the present invention. Hereinaf- 
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ter, a disk will be described as an example of the information recording medium. However, the information recording 
medium of the present invention is not limited to the disk, but any information recording mediums. 

Generally, informationTecording areas where some information is recorded on a disk are roughly classified into a 
lead-in area where control information is mainly recorded and a data recording area where user data is recorded. In 
5 addition, the data recording area is generally partitioned into a unit referred to as a sector. Herein, a disk reproducing 
device can directly access the lead-in area, but devices other than the disk reproducing device (e.g., a personal com- 
puter) cannot access the lead-in area. 

Each sector includes a header field where a sector ID (Identifier) for identifying the sector or the like is recorded, a 
user data field where user data is recorded, and an ECC (Error.Correction Code) field where a code for correcting rea- 
10 dout errors at the time of reproduction is recorded. In this embodiment the user data recorded in the user data field in 
the sector is subjected to scramble-processing. Therefore, it is necessary to identify the scramble-processing method 
which is performed with respect to the user data in order for the information reproducing device to correctly reproduce 
the user data from the disk shown in Figure 1 . 

In a predetermined location in the lead-in area of the disk in Figure 1, information which determines a scramble- 
15 processing method which is performed with respect to the user.data (hereinafter, referred to as "scramble information" 
in this specification) is recorded. The information reproducing device reads the area where the scramble information is 
recorded, interprets the scramble information and performs, descramble-processing in accordance with the scramble 
information with respect to the user data: Thus, it is possible to correctly reproduce the user date : . 

Hereinafter, an example of a scramble-processing method which is generally known will be described with refer- 
20 ence to Figure 9. . * . • -.; v - ■ ^ - m * • .> . ; 

Portion (a) of Figure 9 shows that one sector consists of, a sector ID field, a user data field of 2048 bytes and an 
ECC field. A data byte sequence D 0 , D 1p • • • and D 2047 ,is recorded in the user data field. The data byte sequence D 0 , 
D t , • •: and D 2 o47 is obtained by a logical operation of a data byte sequence P' 0 , and D 20 4 7 to be recorded 

(before scramble-processing) and a random number sequence S 0 . S 1p • • • and S 2 o47 ^ or example, the logical oper- 
25 ation can be an exclusive logical sum. The random number sequence Sq. S^ • • • and S 2 o47 is uniquely determined 
by a supplied initial value. • ; \- • - ; ' . . ■- 

In order to obtain the random number sequence Sq-.S^. t - ? : - and S 2047 . based on a predetermined bit string in the 
• sector (e.g., three bits in the predetermined' location in <the. .sector ID), a table as shown in portion (b) of Figure 9 is 
referred to. For example, in the.case where the three bits^in the predetermined location in the sector ID are (0, 0, 1), 
30 100Fh is obtained as the initial value according to the table, and the random number sequence B 0 . B 1( • • • and B 2(M 7 
(corresponding to S 0 , S 1t • • • and S 2(M 7) is uniquely determined. 

As a method for generating the random number, sequence S 0 , S 1t • • •, and_S 20 47 from the supplied initial value, 
for example, a method of employing a shift register as shown in portion (c) of Figure 9 is known. . 

As a scramble-processing method, it is possible to employ other .methods such as a method of replacing a prede- 
35 termined bit in the byte sequence in the user data. The following description is made by taking the scramble-processing 
method described with reference to Figure 9 as an example. * 

Figure 2 shows a structure of a scramble-information recorded in a predetermined, location in the lead-in area in the 
disk shown in Figure 1 . _t .;. • - 

As shown in portion (a) of Figure 2, in this example, the scramble information is an identifier for designating a table 
40 for providing an initial value for a random number sequence to be usedjn scramble-processing. It is assumed that infor- 
mation for specifying the scramble-processing method ottier than the table is previously defined. 

For example, the content of the scramble information of (1 , 0) indicates that, .among four tables previously defined 
as shown in portion (b) of Figure 2, table 2 isused for !he scrarnble^processing. The information reproducing device has 
a memory storing the four tables shown in portion (b). of Fjgure 2, and switches the table to be used for descramble- 
45 processing in accordance with the scramble information. Thus, it, is possible to correctly execute the descramble- 
processing with respect to the user data. 

Figure 3 shows another data structure of the disk according to the present invention. An initial value table is directly 
recorded in the lead-in area in the disk shown in Figure 3. The user data which is subjected to scramble-processing with 
the random number sequence generated by using the initial value table is recorded in the data recording area in the 
so disk. Herein, it is assumed that other parameters: which the scramble-processing. method shown in Figure. 3 has are 
uniquely determined in advance. - - 

The information reproducing device reads the initial value table recorded in the lead-in area in the disk, and inter- 
prets the initial value table. Thereafter, the information reproducing device sets a descramble-processing procedure in 
accordance with the initial value table, and descrambles the user data in accordance with the descramble-processing 
55 procedure. Thus, it is possible to correctly reproduce the scrambled user data. 

Furthermore, the disk can be reproduced by an information-reproducing device which only has a specific descram- 
ble-processing procedure, only in the case where. the initial value table of the disk is matched with that of the information 
reproducing device. It is impossible to correctly- reproduce in other cases than that. . , 
' • . The embodiment described above has 1 demonstrated a method of changing the initial value table of the random 
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number sequence in the scramble-processing method shown in Figure 9. However, the scramble-processing method 
shown in Figure 9 is not necessarily used/ and a totally different scramble-processing method can be used. Further- 
more, in the scramble-processing method shown in Figure 9, a variety of parameters which can be changed exist, other 
than the initial value table (e.g.* how to select a bit string for reference to the initial value table and a structure of a shift 

5 register for generating random numbers or the like). Thus; it is possible to supply an identifier to each of the changeable 
parameters and a combination thereof; ... 

As described above, according to the information recording medium of the present invention, it is possible to 
change the scramble-processing method depending on the use and whether or not copying is permitted. As a result, 
illegal reproduction (e.g.. reproduction of an industrial disk by a consumer disk reproducing device) and illegal copying 

w can be prevented. - 

(Second Embodiment) 

Figure 4 shows a structure of an information reproducing device according to the present invention. The information 
is reproducing device includes a host computer 1 arid a disk reproducing device 2 for reproducing data recorded in a disk 

The host computer 1 includes an interface section (l/F section) 4, an AV decoders for decoding video information 
so as to have a form in which the video information can be displayed, a video board 8 for supplying the video information 
to a display device 7, a'CPU 10 and an internal memory 11 such as a DRAM (Dynamic Random Access Memory). The 

20 video board 8, the CPU 10 and the internal memory 11 are interconnected via a data bus 9. The output of -the video 
board 8 is connected to the display device (output device) 7. A hard disk drive 12 is connected to the interface section 4. 
* A diskr reproducing [ device 2 includes an interface section 5; a data reproduction section 1 3 including a mechanism 
for reading data from a disk 3. a signal processing circuit; a controller and the like; t and a microprocessor 14 for control- 
ling the disk reproducing device 2. * : * 

25 The host computer 1 and the disk reproducing device 2 are connected via the interface sections 4 and 5, For exam- 
ple, the interface sections 4 and 5 can be connected by an existing interface such as an SCSI (Small Computer System 
1 Interface), an ATAPI (At Attachment Packet. Interface) or the likeV or a specially defined interface for its own. 

The disk reproducing device 2 reads scramble information; recorded in the.lead-in area in the disk 3; at the time of 
• reset of the disk reproducing device 2 and at the time of 'replacement of the disk 3, interprets the scramble information 

30 and sets a descramble : processing procedure in- accordance withi the scramble information in the data reproduction sec- 
tion 13. - " 

In order to display the user data recorded in the data recording area in the disk 3 in the output device 7,?the host 
computer 1 issues a reproduction only command (hereinafter, referred to as a PLAY :AV command) to the disk repro- 
ducing device 2 via interface sections 4 and 5. In response to the* PLAY AV command, the disk reproducing device 2 

35 - transmits the user data which is subjected to the descramble-processing in accordance with the scramble information 
to the host computer 1 . ■•- 

The interface section 4 of the host computer 1 does not transmit the user data received from the disk reproducing 
device 2 by using the PLAY AV command to the data bus 9, but only transmits to the AV decoder 6. Therefore, it is 
impossible to record the user data obtained by using the PLAY AV command in a rewritable medium such as the hard 

40' diskdrive 12 connected to'the host computer 1. : - ' r - . . *: - = 

The host computer 1 isisues a data readout command (hereinafter, referred to as. READ command) in the case 
where it is necessary to record the user data recorded in the data recording area in the disk 3 to the hard disk drive 12 
and the internal memory 1 1 . In response to the RE AD command, the disk reproducing device 2 determines whether or 
hot copying of the disk 3 is permitted, based on previously retained'scramble information. The disk reproducing device 

45 2 behaves differently depending on whether or not the'scramble system specified by the scramble information is a type 
whose copying is permitted. - ' - - 

' fc ■ In the case where the disk reproducing device 2 determines that copying of the disk 3 is permitted, correct user 
data which has been subjected to the descramble-processing in accordance with the scramble information read from 
the lead-in area in the disk 3, at the time of the start-up operatibn of the disk reproducing device 2, is transmitted to the 

so host computer 1 . On the other hand, in the case where the dis1< reproducing device 2 determines that the copying of the 
disk 3 is prohtoited, erroneous user data which has been subjected to descramble-processing inconsistent with the 
scramble information is transmitted to the host computer 1 . Alternatively, it is possible to prevent the disk reproducing 
device 2 from transmitting back correct data to the host computer 1 by conducting an error processing or the like. This, 
illegal copying can be prevented. : '- : " r " : * • ' r - -■- 

55 There are a variety of methods for obtaining information whether or not copying of the disk 3 is permitted (herein- 
after, referred to as copy permission information). For example, kvthe^case where the copy permission information is 
recorded in a predetermined area in the disk 3, the disk reproducing device 2 can read the copy permission information 
from the predetermined area in the disk 3. Alternatively, in the case where the scramble-processing system is limited, 
depending on the copy permission information, the copy permission information can be specified by the read scramble 
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information. 

Alternatively, the copy permission information can be represented by a part of the scramble information. For exam- 
ple, in the case where the scramble information consists of a plurality of bits, it is possible to allow one bit of the plurality 
of bits to represent the copy permission information. Thus, the scramble information can be used in order to definitively 

s differentiate the scramble system for data which is permitted to be copied from the scramble system for data which is 
prohibited from being copied. Therefore, by reading the scramble information from the disk 3, it is possible to determine 
whether or not copying is permitted. In the following description, copy permission information is represented by a part 
of the scramble information. ' ■ * 

Figure 5 shows another structure of an information reproducing. device according to the present invention. In the 

10 information reproducing device in Figure 5, the AV decoder 6 and the interface section 4 which are independent from 
each other in the host computer 1 in Figure 4 are integrated. The structure of. other components is the same as that of 
the information reproducing device in Figure 4. 

When a PLAY AV command is issued from the host computer 1 , the user data having been subjected to the 
descramble-processing in accordance with the scramble information is transmitted from the disk reproducing device 2 

is to the host computer 1 . The user data is AV-decoded by the AV decoder 6, and then directly input to the video board 8. 
Other operations are the same as those in the information reproducing device in the embodiment described with refer- 
ence to Figure 4. . 1 - , 

Figure 6 shows another structure of the information reproducing device accordingto the present invention. The 
information reproducing device in Figure 6 includes an interface section 4b integrated with an AV decoder 6 and an 

20 interface section 4a which is independent of the interface section 4b. The structure of other components is the same as 
that of the information reproducing device in Figure * 5. * . :\\ ... . , - 

A PLAY AV command is only issued from the interface section 4b in the AV decoder 6. On the other hand, a READ 
command is issued from the interface section 4a independent of the interface section 4b. , Since the other operations 
are the same as those in the information reproducing device in the embodiment described with reference to Figure 4, 

25- the explanation will be omitted. . 

Figure 7 shows another structure of the information reproducing device according to the present invention. In the 
information reproducing device in Figure ?, an AV decoder 6 for converting the form of data to a form in which the data 
can be displayed is incorporated into the disk reproducing device 2. Therefore, it is not necessary to connect the disk 
reproducing device 2* to the host computer 1. . -. ^ - - ■ 

30 Hereinafter, the operation of the information reproducing device of this structure will be described. In the-disk repro- 
ducing device 2 in Figure 7, a microprocessor 14 reads scramble information from the disk shown in Figure 1 , interprets 
the scramble information and performs descramble^rocessing to the user data-in accordance with the scramble infor- 
mation. The user data having been subjected the descramble-processing is supplied to the AV decoder 6. The user 
data is AV-decoded by the AV decoder 6, and outputs to the output device 7. Thus, it is possible to reproduce the user 

35 data recorded in the disk 3. 

However, in the case where scramble information, which is not preferable to be reproduced by the disk reproducing 
device 2, is recorded on the disk 3, it is possible for the disk reproducing device 2 not to perform correct reproduction. 
For example, it is assumed that the. disk 3^is an industrial disk for use in Karaoke. In this case, in the case where the 
disk 3 is mounted on a consumer disk' reproducing device, it is possible to prevent the consumer disk reproducing 

4d device from performing reproduction of the data recorded in the disk 3. This is, because the consumer disk reproducing 
* device can determine from'the scramble information recorded in the disk 3 whether or not the scramble-processing 
method is used for the consumer disk. Thus,: by ^restricting the scramble-processing method which can be used, 
depending on the use of the disk 3, it is possible for the disk reproducing device 2 to determine whether or not the data 
recorded in the disk 3 should be reproduced, based on the scramble information. 

45 Furthermore; for a disk reproducing device which can perform only a specific descramble-processing, by producing 
a disk where data is scrambled by a scramble method not corresponding to the descramble-processing is recorded, it 
is possible to prevent the disk reproducing device from reproducing data recorded in the disk 

Figure 8 shows a structure of an information reproducing device according to the present invention. The information 
reproducing device includes a host computer 1 and a disk reproducing device 11. The host computer 1 is not shown in 

so Figure 8. The structure of the host computer:! is the same as those of the host computers 1. in Figures 4 to 6. 

The disk reproducing device 1 1 includes an'interface section (IF section) 5, a data reproduction section 13 for read- 
ing data recorded in the disk 3, a microprocessor 14 for controlling the disk reproducing device 1 1 , a descramble circuit 
section 1 5. a demodulation and error correction section 1 6. a ROM (Read Only Memory) 1 7 for storing a program which 
is to be executed by the microprocessor. 1 4 or the like,; and a data processing RAM (Random Access Memory) 20. The 

55 interface section 5, the data reproduction section 13. the microprocessor 14. the descramble circuit section 15, the 
demodulation and error correction section 16:and the data processing RAM 20 are interconnected via an internal data 
bus 19. The descramble circuit section 15 includes an initial value table storing memory 18. 

' The microprocessor 14 reads-the scramble information :from the disk 3 at the time of introduction of the power or 
the replacement of the disk 3. and interprets the scramble information. 
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In the case where the disk 3 has the data structure shown in Figure 2, the microprocessor 14 selects one initial 
value table from a plurality of initial value tables previously stored in the ROM 17 in accordance with the content of the 
scramble information. The microprocessor 14allows,a selected initial value table to be stored in the initial value table 
storing memory 18 in the descramble circuit.section 15. The initial value table storing memory 18 can be, for example, 

5 a RAM. Alternatively, in the case where the initial value table storing memory 18 is a ROM r a plurality of initial value 
tables can be previously stored in the ROM. * : - , 

When the host computer 1 issues a PLAY AV command, the PLAY AV command is input to the microprocessor 14 
via the interface section 5 in the disk reproducing device 2. In response to the PLAY AV command, the microprocessor 
14 instructs the descramble circuit section 15 so as to perform descramble-processing with, respect to the scrambled 

io user data. The descramble circuit section 1 5 performs the descramble-processing in accordance with the initial value 
table stored in the initial value table storing memory 18. The data having been. subjected to the descramble-processing 
is transmitted to the host computer 1 via the interface section 5. Thus, the data recorded in the disk 3 can be repro- 
duced. * 

On the other hand, when the host computer 1 issues aREADcommand, the READ command is input to the rnicro- 

15 processor 14 via the interface section 5 in-the. disk reproducing device. 11. At this time, the microprocessor 14 deter- 
mines from the 'scramble information previously read fromthe disk 3 whether or not copying is permitted in the scramble 
system. In the case where the microprocessor determines that copying is prohibited, an initial value table different from 
the initial value table corresponding to the scramble information is set in the descramble circuit section 1 5. Alternatively, 
the microprocessor 14> can transmit back an error to the host computer 1 without setting the initial value table in the 

20 descramblecircurt section-l 5. Thus, it is possible to prevent data recorded in the disk 3 from being reproduced, 

Furthermore, in the case where the microprocessor 14 determines from the spramble information that copying is 
permitted and in the case where the'disk 3 has the data .structure shown in Figure 3, the microprocessor 14. reads an 
initial value table from the lead-in area inthe disk 3„and allows the initial value table to be stored in the initial value table 
storing memory 18 in the 'descramble circuit section 15, The initial value table storing memory 18 is rewritable memory 

25 (e.g., an RAM). The description of other processings is omitted because they are the same as those in the case where 

- the disk 3 has the data structure shown in;Figure 2r -.-v. 

.. . : . As described '^bbve; according tb.the information rfeproducing device, of the present invention, it is possible to 

- change the descramble-processing method depending pathe scrambleJnformation recorded in the information record- 
ing medium. Thus, it is possible to correctly reproduce data scrambled by <a plurality of kinds of different scramble- 

36 processing methods. r ^ . . ' ; . . 

Fdrthermore, according to the information reproducing device of the present invention, it is possible to determine 
whether or not tc reproduce the data recorded irv the information recording mediurn depending on the scramble infor- 
mation recorded in the informationr-recording medium. s As a result, illegal copying can be prevented, and thus the cop- 
yright of the data recorded in the informationrecording medium can be protected.. , 

35 ' 

(Third Embodiment) • > ■" - . . - 

Portion (a) of Figure 10 shows a data structure of an information recording medium according to the present inven- 
tion. The information recording area where somedatais recorded on the information recording medium includes a lead- 
40 in area, a data Recording area and a lead^out area; In th6. lead-in area, information necessary for the information repro- 
ducing device to reproduce the- informatior^Tecording medium is recorded.; In the data recording area, primarily, data 
such as program data useful for the user and AV data ^recorded, : -r 

Portion (b) of Figure 1 0 shows a data structure of a Gontrol data arjea.recorded in the lead-in area. The control data 
area includes a physical information secton and a scramble information sector. In the physical information sector, phys- 
45 ical data of the disk such as a disk diameter, a disk structure, a recording density or the like are recorded. In the scram- 
ble information sector, information on a scramble system which has been used on the data recorded in the data 
recording area of the information recording medium or the like is recorded. The scramble information sector is referred 

- to in order for the information reproducing device to perform descramblerprocessing. The scramble information sector 
will be described in detail with reference to the accompanying drawings later. • 

so Portion (c) of Figure 10 shows a data structure of a volume-file management area. In this embodiment, the data 
structure of the volume-file management area is compliant with International Standard Organization (ISO) 9660. The 
ISO 9660 is adopted in CD-ROM (Compact Disk-Read Only memory) -..<--■■-. 

The volume-Tile management' area includes a volume descriptor, apath table and a directory record. 

In the volume descriptor, the size of the volume space and information on recording location of the path table, infor- 

55 mation on recording location of the directory record, informaition ondisk production date or the like are recorded, in the 
path table, a table which allows paths of all directories existingonthe information recording medium to correspond to 
the recording location Information is recorded. In the directory record;;information on an identifier of each director or file 
(generally a directory title or a file title), information on recording locatioaof data ; .the size ptthe file, properties or the 
like are recorded. f : - • .~ \v\; ; ':, . •■ 
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Portion (d) of Figure 10 shows a further detailed data structure of the directory record. In a directory record for a 
root directory, a property and an identifier of the root directory, a production date or the like are recorded. Furthermore, 
in the directory record for the root directory (first sector), information on recording location of the directory is recorded. 
In the directory record for the root directory (second sector), similar information is recorded. In addition, in a directory 
s .-. record for file A, information on recording location of data of file A, adata length, information on the identifier for the file, 
a copyright managing identifier or the like are recorded. Thus, the plurality of directories form a hierarchy. The root direc- 
tory is a directory located on the top of the hierarchy. This will de described in detail with reference to the accompanying 
drawings later. 

» In the data recording area, a file which is scrambled and a file which is not scrambled are recorded. For example. 
10 scrambled files A and C are scrambled files, and non-scrambled file B is a file which is not scrambled. It is preferable 
that a file storing AV data whose copyright should be protected is a scrambled file. 

Portion (e) of Figure 1 0 shows a data structure of the scrambled file A. The file A is partitioned into. a plurality of 
continuous sectors starting from a - sector n. Data stored in each of the plurality of sectors is subjected to scramble- 
processing. Hereinafter, in this specification, the sector storing data having been subjected to the scramble-processing 
is is referred to as "a scrambled sector". r . > „ , 

Portion (!) of Figure 10 shows a data structure of the.non-scrambled file B. The file B is partitioned into a plurality 
of continuous sectors starting. from a sector *m. Data stored- in each of the plurality of sectors is not subjected to the 
scramble-processing. Hereinafter, in this specification, the sector storing data not subjected to the scramble-processing 
is referred to as "a non -scrambled sector". * . . 5 . . 

20 Portions (a) to (c) of Figure 11 show a data structure of the directory record jri the volume-file management area. 
The directory record includes a directory record length, file recording location information, a file data length, a file iden- 
tifier and copyright managing information. -. 

The directory record length is information showing the size of the directory record of the file (or directory). The file 
recording location information is information showing a location from which the sector having data of the file recorded 
25 (hereinafter, referred to as an extent) starts. The file data length is information showing the number of sectors constitut- 
ing the file. The file identifier, is identification: information for-identifying the file (file title). The copyright managing infor- 
mation is information regarding the copyright management of the file. . A • . < : . < 

The copyright managing information includes a scramble flag field and a scramble systemf ield. In the scramble flag 
field is recorded a flag for indicating whether onnotdata in the file has been subjected to the scramble-processing. In 
30 the case where data in the file has been subjected to the scramble-processing, a flag haying value 1 is recorded in the 
scramble flag field.. In the case where data in thefile has not?been subjected to the scramble-processing, a flag having 
value.O is recorded in the scramble flag field. Therefore; by.referring to the scramble, flag field, it can be determined 
whether or not the data in the file has been <subjected-to the -scramble-processing. In the scramble system field is 
recorded an identifier for indicating a system of the scramble-processing which has been performed to the data in the 
35 file. Therefore, by referring to the scrambles system field, the scramble-processing which has been performed to the data 
can be determined in a unit of file, r • ; - 

Hereinafter, referring:to portions (d) to (f) of Figure 11,. an exemplary scramble system will be described.; A scram- 
ble system identifier corresponding to this scramblesystemis set as 1. • : , 

Portion (d) of Figure 11 shows a data structure of a scramble information sector recorded in a control data area in 
40 . a lead-ih area. The scramble information secton-includes, a sector header field and a main data field. 

The sector header field of the scramble information sector-includes an address field where an identifier for the infor- 
mation reproducing device to identify the: sector is recorded .< a scramble system field where information for specifying 
the scramble system performed to the jrtformation recording area,<as-described above, the scramble system of this 
example is set as 1)-is recorded, and a mutuahauthentication key field where a mutual authentication key for use in 
45 authentication processing, for determining whether or not the information reproducing device should supply, data sub- 
jected to copyright protection to an apparatus requiring transfer of reproduction data (hereinafter, referred to as mutual 
authentication processing). The mutual authenticationprocessing will be described in detail later. 

In the main data field of the scramble information sector is recorded a table for determining a random, number 
sequence to be used at the time of scramble-processing from a key for scrambling. Therefore, it is not until the informa- 
50 tion reproducing device uses the table recorded in the scramble information sector and the key for the scrambling that 
descramble-processing can be performed. Hereinafter, the initial value for determining the random number sequence 
is referred to as preset data. > 

Portion (e) of Figure 1 1 shows a data structure oia scrambled sector in the data recording.area. The sector header 
field in the scrambled sector includes an addressJield. a scramble flag field where a flag for identifying whether or not 
ss the scramble-processing has been performed to -the main data field in the sector, a seed key field where the key used 
at the time of scrambling (hereinafter, referred to as a seed key) is recorded, and a use identifying information field 
where information for identifying use of the fite is recorded. In the scramble flag field is recorded value 1 indicating that 
scramble-processing has been performed: In the: seed key field is recorded a key to be used for descramble-processing 
* for the main data field. . Furthermore, inthe use identifying information field is recorded information on the use of the 
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recorded data such as industrial use or consumer use, : and is recorded information indicating a reproduction restriction 
in the case where the use of the information reproducing device is;different from the use identifying information. Fur- 
thermore, in the main data field is recorded data having been subjected to the scramble-processing determined by a 
scramble system specified by the scramble information sector in the1ead-in area and the seed key in the sector header 
5 field in the scrambled sector More specifically, a preset data is determined based on the value recorded in the seed key 
field and referring to the table in the scramble information sector. Then, Jay using the random number sequence deter- 
mined by the-preset data, scramble/descramble-processing jspossible.ln the following description, the seed key is the 
same for every file. 

On the other hand 1 , the sector header in the non-scrambled sector includes an address field and a scramble flag 
w field. In the scramble flag field is recorded a value 0 indicating that the scramble-processing has not been performed to 
the main data field in the sector. Therefore, the information reproducing device can easily recognize that it is unneces- 
sary to perform descramble-processing by detecting the value 0 in the scramble flag field. 
Next, referring to Figure 12. an exemplary scramble' system will be described. - : ' 

Portion (a) of Figure 1 2 shows that, by performing a logical operation of data sequence Dj (j is an integer from 0 to 
/s 2047) of 8 bits and a random number sequence Sj of 8 bits generated based on a certain initial value, scrambled data 
SDj is obtained. More specif ically, a preset data of 15' bits determined by the scramble information sector recorded in 
the lead : in area and the seed key in the sector headerfi&ld in each: sector: is. set in a shift register 301 , and an exclusive 
OR of the most significant bits r 14 and r 10 is put t6 th&bit 0 while 1 shifting to the direction of most significant bits. Thus, 
the random number sequence Sj is generated. Herein, the bit in the bit location r 0 is input to a logical operation block 
co 302 for every one bit shift, and a value of 8 bits-input td^rfe togical operation block 302 for eight shifts is set as Sj. By 
the'logical operation (e.g., exclusive OR or the like) erf -Sj obtained in this manner and recorded data of 8 bits, data SDj 
after scrambling is obtained. When the size of the main data in one sector is 2048 bytes; scramble-processing in one 
: sector can be'performed by repeating the aforementioned procedure 2048 times from SD 0 to SD 20 47 ** 

- Furthermore, portions (b) and (c) of Figure 1 2 show, conversion from the scramble information sector to a table for 
P5 determining preset data. 1 In the scramble information Sector shown in portion (b) of Figure .12: four entries of the table 

are recorded, and each entry consists of a set of a'seed key-and preset data. These sets are tabled to obtain the table 
shown in portion (c) of Figure 12. For (example, when' the fceed key recorded in the sector header is 01b (b means binary 
- number); 0077h (h means hexadecimal number) as ; preset>data is set inthe shift register 301iin portion (a) of Figure 12 
' : as the initial value; arid 1 the aforementioned shift operation and the logical operation are performed. Thus, scram- 
30 ble/descramble-processihg becomes possible.' - ' r i- ^v jj- 
As described above, the information recording mfedium iri this embodiment enables scrambling in a file unit. The 
: information recording medium' in this embodiment has information whether or not scrambling has been performed as 
; copyright managing information in the file management area and in the scramble flag field in the sector header in a unit 
of sector. This enables adevice such as a personal computer which only recognizes main data to recognize whether or 
35 hot scramble-processing has been performed, and enables a device such as an optical disk drive which cannot recog- 
nize main data to recognize whether or not scramble-processing has been performed. Therefore, in the case where 
data is to be reproduced by the optical disk drive connected to the personal computer, it is possible for both of the former 
and the latter to determine whether or not the copyright'of the data should.be protected, - 

- * Furthermore, since in the information recording medium of this embodiment different scramble-processing for 
40 every file can bb performed by changing the "seed kSy ,~6vfcn if a scramble method for one scrambled file is decrypted by 

an illegal act, another scrambled file can be prevented from being descrambled by the decrypted scramble system. 
Thus, it is possible to enhance security in processing for: copyright protection, w : ■-. > 

Furthermore, in the case where the information recording medium of this; embodiment is used for the purpose of 
copyright protection, the scramble information sector where scramble information indispensablerto descrambling is 
45 recorded exists in the lead-ih area which cannot be readby an apparatus such as ^personal computer. For this reason, 
the act of illegally reading the scramble'information can advantageously be. prevented, Furthermore, since the lead-in 
area is reproducible by the same reproducing meains as the data recording area, there is no need for providing a special 
reproducing means. " - 1 ~ . - 

Furthermore, since information recorded in a unit of 'sector such as seed key, scramble flag, use identifying infor- 
so mation or the like are recorded in the sector header field which cannot be read byan apparatus such as a personal com- 
puter, as in the case of recording the ; scramble information-in the lead-in area described, above, the act of illegally 
reading the information can advantageously be prevented. 

Furthermore.* since the use identifying information is recorded in theseetor header field, it is possible to determine 
depending on the content of the recorded data Whether the reproducing device should perform reproduction or.prohibit 
55 reproduction. Therefore, for example! by recording different identifiers between an industrial disk and a consumer disk 
in this area, the industrial disk can be prevented from beingreproduced by : a consumer.reproducing device. 

Furthermore, by recording'a mutual authentication key for use in mrjtual authentication processing, the reproducing 
device can change data received antftransmitted at the mutual authentication operation for: every mutual authentication 
key. Thus, the processing method for the mutual authentication processing can be advantageously prevented .from 
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being illegally decrypted. Therefore, it is possible to prevent the-act of illegally copying to a magnetic disk drive or the 
like. . :;>.:•♦.- • . - 

In this embodiment,' the volume-file structure is based on ISO9660, which is the international standard, but it is not 
limited thereto, and another volume-file structure can be used, as long as the volume-file structure has the information 
s described above. L 

In this embodiment, the scramble system uses the logical operation of random numbers and data, but it is not lim- 
ited thereto, and-another scramble system can be used, as long as the scramble system has a table and a seed key for 
referring to the table: 

In this embodiment, a table for determining preset data is recorded in the lead-in area, but it is not limited thereto, 
10 and another parameter can be used, as long as the parameter can determine the table. An identifier for specifying one 
table among a plurality of previously known tables can be recorded. 

In this embodiment, an information recording area for identifying the use as the use identifying information field is 
provided in the sector header field in the scrambled sector. However, it is not necessary that the filed is definitely iso- 
lated, but the use can be classified by a value of the seed key. 
15 In this embodiment, in the scrambled sector, all 2048 bytes in the main data field are subjected to the scramble- 

processing. However, the scramble-processing is not 'necessarily performed to the entire main, data field, but can be 
performed to a predetermined part of the field. 

(Fourth Embodiment) -. ; . v „ 

Next, another data structure of the information recording, medium according-to the present invention will be 
described. The data structure of the information recording medium is the same aslhe information recording medium 
shown in Figure 10. Hereinafter, only the cfifferertt points frorrrthe data structure shown irv Figure -10 will be described. 
Portions (a) to (c) of Figure 1 3 show a data structure of a directory record recorded in the volumeTf ile management 
25 * area In the scrambfe system field in the copyright managing information of the directory record is recorded a value 2 
indicating a scramble system which will be described in this embodiment. 

■ Portion (e) of Figure 13 shows a data structure of the scrambled sector. The sector header field.in the scrambled 
sector includes an address field, a scramble flag field.^a media GGMS (Copy Generation Management System) data 
field, an encrypted original CGMS data field, an encrypted^ title key field and an encrypted use identifying information 
30 field. ".■*■■•.*..- .-r :v, :•!».-. : -- - :-'>■•• 

In the scramble flag field is recorded a value -1 indicating that the scramble-processing has been performed. - 
In the media GGMS data field is recorded copy permission information of the information recording medium. In the 
encrypting original CGMS data field is recorded copy permission information of most original data, in the case where 
data of this sector is copied from another medium. Herein, the.media CGMS data represents copy permission informa- 
35 tion of the data of the information recording medium. The.media GGMS data is updated at the time of a copy operation. 
The original CGMS data represents copy permission:informatron at the time of disk production. Since the original 
CGMS data is encrypted. H is copied as it is at the time -of a copy operation. Table 1 shows the definition of the media 
CGMS data and the original CGMS data. r : : • 

v ** - . • 

c , Table, 1, 



Media CGMS data/Origi- 
* tia! 'CGMS' data 


Content 


00b ■ ,, 


Copying permitted 


01b- 1 ; * 


Unused 


• 10b 


One copying permitted 


11b ' • 


. Copying prohibited 



i Referring to Table T. for example/when the media CGMS data is 1 1b and the original CGMS data is 10b, it should 
' be determined that the data in the sector is originally in the. state where only one copy is permitted (media CGMS data 
55 and original CGMS data are both 01b), and the media CGMS data is changed to 11b which means copying prohibition 
by having already conducted one copy operation. Hereinafter, the media CGMS data and the original CGMS data in 
combination are referred to as CGMS control information. 

In the encrypted title key field is recorded 1 a key for descrambling the scramble-processing performed to the main 
data field. v. 
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In the encrypted use identifying information field :is recorded identification information for specifying the use. The 
encrypted original CGMS data field, the encrypted title key field and the encrypted uses identification information field 
are all subjected to encrypting processing; and information cannot be read simply by reading the sector header field. 
The encrypted data has been encrypted using an encrypted disk key recorded in the sector header field in the lead-in 
5 area of the information recording medium. Therefore, in order to decrypt the encrypted information in the scramble infor- 
mation sector header field, the encrypted disk key is required. 

Portion (d) of Figure 13 shows a data structure, of the scramble information sector. In the following.description, in 
order to definitely differentiate encrypted data and data whose code is decrypted, the encrypted data is denominated 
with "encrypted", and the data whose code is decrypted is denominated with "decrypted". For example, data obtained 
io by encrypting the title key is referred to as an "encrypted title key", and data obtained by decrypting the encrypted title 
key is referred to as a "decrypted title key". 

The scramble information sector is recorded in the control data area in . the lead-in area, 
i In the sector header field in the scramble information sector is recorded a value 2 indicating that the scramble sys- 
tem is this type of scramble system. Furthermore, in the mutual authentication key field is recorded an mutual authen- 
15 tication key for use in mutual authentication processing for determining whether or not data after descrambling is to be 
supplied. This mutual authentication key will be described indetail later in an embodiment of an information reproducing 
device. 

In the main data field in the scramble information sector is recorded an encrypted original CGMS data, an 
encrypted title key, and an encrypted disk key for decrypting an encrypted use identifying information of the scrambled 

20 sector. The encrypted disk key is further encrypted, and the key for decrypting the encrypted disk key (hereinafter, 
referred to as a master key) is^provided by the information reproducing device. , 

In the main data field in* the scramble information sector is recorded a plurality of encrypted disk keys such as 
encrypted disk key '1 , encrypted disk key 2, • • . The encrypted disk key is encrypted by a corresponding master key 
in such a manner that the encrypted disk key 1 , the encrypted disk key 2; • • • are encrypted by the master key 1 . the 

25 master key 2. • . respectively. Herein, the encrypted disk- key 1. the encrypted disk key 2. •■ are obtained by 
encrypting the same disk key information by different mates keys. Therefore, in the case where an information repro- 

' ducing device Ainternally includes the master key. t and another jnforjnatiqn reproducing device B internally includes 
- the master key 2. the information reproducing device A decrypts the encrypted disk key 1 and the information reproduc- 
; ing device B decrypts the encrypted disk key 2, thus obtaining a decrypted disk key having the same content. 

30 Portion (f) of Figure 13 shows a data structure of the non-scrambled sector. In the scrambled sector flag field is 
recorded a value 0. The data recorded in the main data field is not subjected to scramble-processing. This indicates that 
the same data access as a conventional information recording disk is possible. 

As described above, in the information recording medium in this embodiment, data reproduction is possible by 
exactly the same access as the conventional device for, reproduction pf the non-scrambled sector. On the other hand, 

35 . in order to perform reproduction of the scrambled sector, the information reproducing device having, the master key 
reads the scramble information sector in the lead-in. area and decrypts the encrypted disk key by the master key, and 
further decrypts the encrypted title key of the.sector. header in the scrambled. sector using the decrypted disk key, and 
performs descramble-processing of the scrambled data using the decrypted title key Thus, data can be reproduced. 
Hereinafter, the case where the scramble system described in the third embodiment is used as an example of the 

40 scramble system will be described. In the third embodiment, preset data is generated by using a conversion table. In 
the information recording medium in this embodiment, when am value for random number generation is encrypted 
and recorded in the encrypted title key f ield,;sCTarnbi^ be easily performed by using the shift reg- 

ister 301 and the logical operation block 302 in portion'(a) of FiguFelg, Mpre specifically, the decrypted title key is used 
as an initial value of the shift register 302, and the shift is repeated so that a random number sequence Sj is generated. 

45 Then, the logical operation of the randorri number sequence Sj aridHthe data sequence Dj is performed, so that scram- 
ble-processing can be performed. Furthermore, descrambling of data can also be performed by using the shift register 
301 in portion (a) of Figure 12. . - . . 

As described above, the information recording medium in this embodiment enables scrambling in a file unit. In addi- 
tion, the information recording medium in this embodiment has information whether or not scrambling is performed as 

so copyright managing information in the file mariagement T area and in the scramble flag field in the sector header in a unit 
of sector. This enables a device such as a personal computer which only recognizes main data to recognize whether or 
not scramble-processing is performed, and enables a device such as an optical disk drive which cannot recognize main 
data to recognize whether or not scramble-processing is performed. Therefore, in the case where data is to be repro- 
duced by the optical disk drive connected to the personal .computer; both of the former and the latter can determine 

55 whether or not the copyright of the data should be protected, - .w . : . ' " .-■).*.: 

Furthermore, since in the information: recording medium of; tWs. embodiment, different scramble-processing for 
every file can be performed by changing the title key. even if a scramble-method for one scrambled file is decrypted by 
an illegal act, another scrambled file can be prevented from being descrambled by the decrypted scramble system. 
Thus, it is possible to enhance security in processing for copyright protection. 
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Furthermore, in the case where the information recording medium of this embodiment is used for the purpose of 
copyright protection, the scramble information sector where scramble information indispensable to descrambling is 
recorded exists in the lead-in area which cannot be read by an apparatus such as a personal computer. For this reason, 
the act of illegally reading the scramble information can advantageously be prevented. Furthermore, since the lead-in 
5 area is reproducible by the same reproducing means as the data recording area, there is no need for providing a special 
reproducing means. 

Furthermore, since the scramble flag, the CGMS control information, the encrypted title key and the encrypted use 
" identifying information, which are recorded in a unit of sector, are recorded in the sector header.field which cannot be 
read by an apparatus such as a personal computer, as in the case of recording the scramble information in the lead-in 
io area described above, the act of illegally reading the information can advantageously be prevented. 

Furthermore, since the use identifying information is recorded in the sector header field, it is possible to determine 
depending oh the content of the recorded data whether the reproducing device should perform reproduction or prohibit 
reproduction. Therefore, for example, by recording different identifiers between an industrial disk and a consumer disk 
in this area, the industrial disk can be prevented from being reproduced by a consumer reproducing device. 
is Furthermore, by recording a mutual authentication key for use in mutual authentication processing, the reproducing 

device can change data received and transmitted at the mutual authentication operation for every mutual authentication 
key. Thus, the processing method for the mutual authentication processing can be advantageously prevented from 
being illegally decrypted. Therefore, it is possible to prevent the act of illegally copying to a magnetic disk drive or the 
■ like. . . . ; . : ■ . * - * 3 

20 Furthermore, in the information recording medium in this embodiment, a hierarchical encrypting/scramble-process- 

ing is performed in such a manner that the main data in the scrambled sector is encrypted by the,title key, the title key 
is encrypted by the disk key, and the disk key is encrypted by the master key. For this reason, even if the main data in 
the scrambled sector is illegally copied, descrambling can be prevented.so that the illegal copying makes no sense. 
Furthermore, since the CGMS control information is recorded, even if a file is copied from the information recording 
25 medium in this embodiment to another rewritable medium, it is possible to determine whether copying was illegal or 
*■ legal. • ■ " • - ... *.■.*:,.-,., 

'In this embodiment, the scramble-processing is performedby.the logical.operation of data and the random number 
"obtained by using the title key as the initial value. : However, -the scramble system is not limited thereto, but another 
scramble system can beused, as long as the system. scrambles data in accordance with a specified key . . .. 
30 In this embodiment, the volume-file structure is based on ISO9660, which is the international standard, but it is not 
limited thereto, and another volume-file structure can be.usedviasHong as the copyright managing information equiva- 
lent to the content described in this embodiment can berecorded in the volume-file structure., 

In this embodiment, in the scrambled sector, all data in the sector is scrambled. However, the entire main data in 
the sector is not necessarily scrambled, but a part of the main data can be scrambled. 
35 In this embodiment, in the scrambled file, all sectors constituting the file are subjected to the scramble-processing; 
However, a part of sector in the scrambled file can be subjected to the scramble-processing. } 

in this embodiment, the CGMS control information uses three types, i.e., one copying permitted, copying prohibi- 
tion, and copying permitted, but information on two copies permitted, three copies permitted or the like can be recorded 
by extending allocated bits. 

40 The scramble method of the main data described in this embodiment is only an example, and the scramble method 
is not limited thereto. Another method can be used, as long as scramble-processing is performed based on certain key 
information (title key in this embodiment).: r. = 

(Fifth Embodiment) • i ; ; ; . -.c - . .* 

45 . . ■ : i ■ , * z : : . ' , - . . ■ - . 

Hereinafter, an information reproducing device for reproducing the. information recording medium according to the 
present invention will be described with reference to the accompanying drawings. The information reproducing device 
is a device which can commonly reproduce the third and fourth embodiments of the information recorcfing mediums, 
unless mentioned otherwise. Therefore, although an operation for reproducing the fourth embodiment of the information 

so recording medium will be described belowias an example, the third embodiment of the information recording medium 
can be processed in the same manner by substituting the seed key field for the encrypted title disk key, and substituting 
the preset data conversion table for the encrypted disk key of the scramble information sector. 

• Figure 14 is a block diagram showing an information reproducing device 500 according to the present invention. 
The information reproducing device 500 includes a main processor 501 , a bus interface circuit-503, a main memory 

55 504; a SCSI (Small Computer System Interface)- control card 506 for controlling a protocol determined by an SCSI, an 
AV decoder card 507 for extending compressed digital AV data to convert into an analog AV data and output the analog 
AV data, an optical disk drive 509 for reproducing the information recording medium of the present invention, and a hard 
cfisk drive 510. ; • r - 7 ^ . r :*..-■.-• • * ;■ - 

The main processor 501 /the bus interface circuit 503 and the main memory 504 are interconnected via the proc- 
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essor bus 502. The bus interface circuit- 503; the^SCSI control card' 506 and the AV decoder card 507 are intercon- 
nected via a system bus 505. The SCSI control card 506; the optical. disk drive 509 and the hard disk drive 510 are 
interconnected via a SCSI bus. - • ! 

Next, a reproduction operation of an AV file by4he information reproducing device 500 will be described. 
5 When an optical disk is mounted on the optical disk drivk 509, the. main processor 501 reads a volume-file man- 

agement area in the optical disk via the SCSI control card 506, and the main memory 504 stores the volume-file man- 
agement area (hereinafter, data in the stored volume-file management area is referred. to as file managing.information). 

The main processor 501 performs processing whereihe AV decoder card 507 and the optical disk drive 509 deter- 
mine therebetween whether or not the other component has a copyright protection: function (hereinafter, referred to as 

70 mutual authentication processing). During this processing, in the case where either one.of the two components detects 
an error, the mutual authentication processing is regarded as having failed. arjd,subsequent;procedure is cancelled. On 
the other hand, in the case where the mutual authentication processing is normally ended, the optical disk drive 509 
transmits the encrypted disk key of the mounted disk to the. AV decoder card 507. At this time, the optical disk drive 509 
further supplies an encrypteddisk key obtained by encrypting based on; a key generated during the mutual authentica- 

i5 tion processing (hereinafter, referred to a^ a bus key) at the time of outputting the encrypted disk key. The AV decoder 
card 507 internally retains the received encrypted disk key after decrypting it with -the bus key. . . 

Thereafter/Tn'the case where a file recorded :in the opticar disk is to be reproduced, the main. processor 501 refers 
to a scramble fl&g of oopyright managing information in. the file managing information previously stored in the main 
memory 504, and determines whether or not the file to be reproduced is a scrambled file. As a result of the determina- 
te tion, when it is determined that the file to be reprodoced isr an unscrambled, file, the optical disk drive 509 receives a 
reproductiomristruction frorh the main processor 501 via the SCSI 1 control card 506 - and transfers non-scrambled data. 
On the other hand, if the main processor 501 determines: based on.ihe scramble flag of the file managing information 
that' the file to be. reproduced is a scrambled file, the mutual authentication processing between the optical disk drive 
509 and the AV decoder card-507 is executed. * - 

25 When the main processor 501 detects an error during the mutual authentication processing, the processing is can- 

celled without performing reproduction processing. On the other hand, in the case where the mutual authentication 
-processing is normally "ended, the Optical disk*drivei5t>9^transnfiits;back the encrypted title key. prior to reproduction of 
data, arid the encrypted title key is transferred to the AV^decoder.card 507 by the main processor 501,. At this time, the 
optical disk drive 509 transfers the encrypted ititle key;-Whicrtis encrypted by the bus key previously retained. Further- 

30 more, the AV decoder card 507 internally stores the tiecefred encrypted title key after decrypting it by the bus key. 

- Thereafter, the optical disk drive 509 supplies scrambJed;data read from the mounted disk, and the microprocessor 
501 transfers the scrambled data to the AV decoder*, card 507. The. AV decoder card 507 descrambles the scrambled 
data using the title key already stored therein, and converts it to analog.AV data to output an analog signal from a video 
output and an audio output. As described above; the information reproducing device, 500 can reproduce the information 

35 ■ recording medium of the present invention. ■ * cv ■ 

As for a copy operation of a scrambled file from the optical disk drive 509 to the hard disk drive 51 0, since the hard 
disk drive 510 cannot execute the mutual authentication processing, tha mutual authentication is put to an error end. 
Therefore, the processing is cancelled before the optical disk drive 509 supplies data to the SCSI bus, and thus the copy 
operation is not executed. " ! 

46 Furthermore, if a program for illegally copyings scrambled file read. by ;the optical disk drive 509 to the .hard disk 
drive 510 is-loaded to the main memofy 504,,the mutuaUauthenticatiorr processing is normally ended in a certain form, 
and then the transferred scrambled data is copied in the hard disk drive 510. the. scrambled data is copied in the hard 
disk drive 510. However, the mutual authentication processing between the hard disk drive 510 and the AV decoder 
card 507 is required once again, in order to reproduce data copied in the hard disk drive 510. In this case, since the 

45 hard disk drive 510 does not have means for generating a bus key, it is impossible that the scrambled file on the hard 
disk drive 510 is reproduced by the AV decoder card 507. -a - - 

Therefore, even if illegal cbpying is made, the cppy operation can make no sense. As a result, a copyright protection 
mechanism can be realized. - - ' ; - 

Hereinafter, further detailed structures and-operations erf the optical disk drive 509 and the AV decoder card 507. 

so which are components of the information reproducing device 500, will be.described with. reference to Figures 15 and 
16. "respectively. " ' - " " "' * " i: ' ■ * * - ' r . * - 

Figure 15 is a block diagram showing the structure ofc the: optical disk drive 509. The structure thereof will be 
described below. Reference numeral 600 denotes an SCSI control circuit.: Reference numeral 601 denotes a decoder 
authentication circuit for perWrtrring a mutual authentication: processing with arr AV.decoder.. Reference numeral 602 

55 denotes a microcontroller forcorttrollihg the^entire optical disk drive. Reference numeral 603 denotes a program ROM- 
storing an operation program of the microcontroller: Ref erehce numeral 604 denotes a control bus for. transmitting con- 
trol data. Reference numeral 605 dehotfes an ECC (Error Correction Code) processing memory used at the time of error 
correction processing for correction a readout error at the time of reproducing data. Reference numeral 6.06 denotes a 
data reproducing circuit for reading data from the optical-disk 607, digitizing, demodulation, error correction process- 
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• ing or the like. Reference numeral 607 denotes an information recording medium of the present invention and an optical 
disk having the data structure shown in the third embodiment and the fourth embodiment 

Next, the operation of the optical disk drive 509 at the time of mutual authentication processing and at the time of 
reproducing data will be described. ..... t 

5 The optical disk drive 509 which received a mutual authentication request by the SCSI control circuit 600 controls 

the decoder authentication circuit 601 so as to execute a predetermined mutual authentication processing. Since the 
protocol will be described in detail later, it is omitted here. In the protocol for the mutual authentication processing, in 
the case where the microcontroller 602 detects some error, the SCSI control circuit 600 reports an error and the mutual 
■ authentication processing and a subsequent key information transfer operation are cancelled. In the case the mutual 
10 authentication processing is normally ended, a bus key which is determined at the.mutual authentication processing is 
stored in the decoder authentication circuit 601 . 

In the mutual authentication-processing at the time of disk replacement and reset, following the mutual authentica- 
tion processing, a read request of an encrypted disk key is issued to the optical disk drive 509. At this time, the optical 
disk drive 509 controls the data reproducing circuit 606, so as to read an encrypted disk key information from the optical 
is disk 607, and further supplies an encrypted disk key encrypted using the bus key already retained in the, decoder 

* authentication circuit 601 out from the SCSI control circuit 600. On the other hand, in the case of the mutual authenti- 
cation processing at the time of reproducing a scrambled file. .following a normal end oithe mutual processing, the opti- 
cal disk drive 509 receives a readout information of an encrypted title key. At this time, the optical disk drive 509 controls 
the data reproducing circuit 606 so as to read an encrypted title key information from the optical disk 607, and data hav- 

20 ing been encrypted using the bus key already retained in the decoder authentication circuit 601 is supplied out from the 

SCSI control circuit 600. 4 * 5 :, . - : -*. i: , ' " : ~ 

In response to a reproduction request of a file data issued thereafter, the optical disk drive 509 supplies put scram- 
bled data read from the optical disk 607 from the SCSI control circuit 600. This is the end of the description of the optical 
disk drive 509. ** • 

25 ' Although the optical. disk drive 509 in this embodiment receives a transfer request of an encrypted disk key. and 
then reproduces an encrypted disk key field of the optical disk 607, the optical disk driye.509 can read it at the time of 
mounting the optical disk 607. and internally retains jt. * , ; ^ • 

Next, the structure and the operation of the AV decoder card will be described with reference to Figure 16: 
Figure 16 is a block diagram showing the structure of the AV decoder card 507. The -components thereof will be 

30 described below. Reference numeral 700 denotes a^system interface circuit for controlling reception and transmission 
of information with a system bus. Reference numeral 701 denotes a drive authentication circuit forperforming mutual 
authentication processing with the optical dick drive 509. Reference numeral 702 denotes a microcontroller for control- 
ling the entire AV decoder card 507. Reference, numeral 703 denotes a program ROM-where an operation- prog ram of 
the microcontroller 702 isstored. Reference numeral 704 denotes a control bus for transmitting control information. Ref- 

35 erence numeral 705 denotes a descramble circuit fordescrambling scrambled data. Reference numeral 706 denotes 
an audio/video decoder circuit for extending compressed AV. digital data and converting it to an analog AV data Refer- 
ence numeral 707 denotes an audio/video decoding memory, an operating memory, which the audio/video decoder cir- 
cuit 706 uses for data conversion r. , 

Next, the operation of the AV decoder, card 507 at the time of mutual authentication processing and scrambled file 

40' reproduction will be described. ^ :, . 1 ; j \: -v* : ; \. , ■ 

First, at the time of mutual authentication processing at the time-of reset and media replacement, the microcontrol- 
ler 702 controls the drive authentication circuit 701 so as to execute mutual authentication processing with the optical 
disk drive 509 in accordance with a predetermined. protocol, lathe case where the drive authentication circuit 701 
detects an error at the time of mutual authentication processing, the «rror is reported via the system interface circuit 

45 700, and the processing is cancelled. On the other hand, in the case where the mutual authentication processing is nor- 
mally ended, the drive authentication circuit 701 internally retains a£us key determined in the mutual authentication 
processing. ... ;< - 

Furthermore, the AV decoder card 507 receives an encrypted disk key from the system interface circuit 700. Since 
the received encrypted disk key has been encrypted with.the bus key in the optical disk drive 509, the AV decoder card 

so 507 decrypts the encrypted disk key with the bus key-already retained in the drive authentication circuit 701, and then , 
transfers it to the descramble circuit 705. The descramble circuit 705 internally stores the received encrypted cfiskkey. 

On the other hand, at the time of reproducing- a scrambled file, prior to.the reproduction of- the file, the mutual 
authentication processing with the optical disk drive 509 is executed once again. Here, again, in the case where an error 
occurs in the mutual authentication processing, the mutual authentication processing and the subsequent file reproduc- 

55 tion operation are cancelled. In the case where the mutual authentication processing is normally ended without any 
error, the AV decoder card 507 receives an encrypted title key via the system interface circuit 700. Since the encrypted 
title key has been further encrypted with the bus key in the optical disk drive 509, the encrypted title key is decrypted 
with the bus key retained in the drive authentication circuit 701 . and transfers the result to the descramble circuit 705. 
Th& descramble circuit 705 internally stores the received encrypted title key. 



16 

BNSDOCID: <EP 0802535A1 J_> 



; EP 0 802 535 A1 



Thereafter, scrambled data of the scrambled file received from the system interface circuit 700 is transferred to the 
descramble circuit 705 as it is, and is subjected to descramble-processing based on the title key already retained and 
transferred to the audio/video decoder circuit 706 so as to be converted to an analog AV signal and output. 

As described above, according to the information reproducing device 500 of this embodiment, the optical disk drive 
509 includes the decoder authentication circuit 601 , and the AV decoder card 507 includes the drive authentication cir- 
cuit 701. For this reason, key information is not supplied- to an apparatus which has an objective of illegally copying a 
file. Thus, even if data of a scrambled file is illeigally copied, copied data makes no sense by not supplying the key infor- 
mation for executing descrambling. Therefore, an effect of protecting copyright: of the file is provided. - : 

According to the information reproducing device of this embodiment, since the AV decoder card 507 internally has 
the descramble circuit 705 for performing descramble-processing depending on the key information, it is possible to 
descramble the scrambled data for reproduction. 

In this embodiment, an SCSI bus is used for the bus connected to the optical disk drive 509: However, the bus is 
riot limited thereto, and a bus compliant with ATAPI (AT Attachment Packet: Interface) or IEEE. 1394 (Institute of Electri- 
cal and Electronics Engineers 1394) can be used, as long as reproduction data can be transferred in accordance with 
a predetermined protocol. - v . . : . . - 

* In this embodiment, the function of the decoder authentication circuit 601 and the functions the drive authentica- 
tion circuit 701 can be realized by a software executed.by the microcontrollers 602 and 702. < 

(Sixth Embodiment) ^ : '' y * " ' ^ ' '* ' " ' '•■ 

Next, an information reproducing device 800 according to the present invention will be described, : 
■ Figure 17 is a block diagram showing the structure of the information reproducing .device 800 according to the 
present invention. The structure of the information reproducing device 800 is the same as that of the ; information repro- 
ducing device 500 shown in Figure 14, except that an SCSI control circuit for performing communication compliant with 
the SCSI system is incorporated into'an AV decoder card 801 r Therefore, the same components bears the same refer- 
ence numerals; and the description thereof is oririitted. - .V* •> .!- 

Next, the operation of the information reproducing device' 800 will be described. 

Since theSCSIcbritrol circuit incorporated AV decoder card 801 internally includes.the SCSI control circuit, when 
a scrambled f ile reproduction request of the optical disk drive i509 is issued from the main processor 501. the mutual 
authentication processing between the SCSI control circuit incorporated AV decoder card 801 and the optical disk drive 
509 is directly executed. More specifically, the SCSI control circuit incorporated AV decoder card 801 issues a com- 
mand sequence for mutual authentication to the optical disk'drive 509, the optical disk drjve 509 responds to the com- 
mand. In this manner, the mutual authentication processing is performed. : 

" Furthermore, likewise in an operation of reproducing data, it is the SCSI control circuit incorporated AV decoder 
card 801 that makes a reproduction request to the optical disk drive 509, hot the main processor 501 . Therefore, data 
read by the optical disk drive 509 is directly input tathe' SCSI control circuit incorporated AV decoder card 801 and con- 
verted to an analog AV signal and output. • i ... ; 

Figure 18 is a block diagram showing the structure the SCSI control circuit -incorporated AV decoder card 801. 
Hereinafter, only different points from the structure of the AV decbdfer card'507 shown in Figure 16 will be described. 

Reference numeral 900 denotes a SCSI control circuit for controlling reception and transmission of data with an. 
SCSI bus. Reference numeral 901 denotes a program ROM where a program to be executed by the microcontroller is 

'stored. : * ■ '"' ' ' - * j ' - • >f ' ■'• ''• 

When a reproduction request for a scrambled file is input to the system interface circuit 700, the microcontroller 702 
controls the drive authentication circuit 701 and the SCSI control circuit 900 so as to execute the mutual authentication 
processing with the optical disk drive 509. At this time • in a mutual authentication protocol, a command is directly issued 
from the SCSI control circuit 900 to the optical disk drive 509; Furthermore, the microcontroller 702 controls the drive 
authentication circuit 701 in accordance with the mutual authentication protocol so as to perform mutual authentication 
processing. In the case where the mutual authentication processing is ended by an error; the microcontroller 702 con- 
trols the system interface circuit 700 to report the error to the main, processor 501 so that the processing is ended. On 
the other hand, in the case where the mutual authentication processing is normally ended, data of a scrambled file is 
directly received by the SCSI control circuit 900 from the opticahdisk drive 509. and data descrambled by the descram- 
ble circuit 705 is converted to an analog AV signal by the audio/video decoder circuit 706 and output. By the procedure 
described above, as in the case of the information* reproducing device of the-fifth embodiment, AV data can be repro- 
duced while preventing the copy operation' which infringes copyright*of data recorded in the information recording 
medium of the present invention. ' * * : • ■ 

As described above, according to the information reproducingdevioe 800 of1his embodiment, in addition to the fea- 
ture of the information reproducing device of the fifth embodiment, since the optical.diskdrive 509 and the SCSI control 
circuit incorporated AV decoder card 801 directly receive- ancf transmitricommands and data, security against illegal 
decrypting a mutual authentication system and key information,- and: the execution of an unjust copy operation can be 
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enhanced. - 

Although the information recording medium to be reproduced has been described using the fourth embodiment of 
the information recording medium according to the present invention, the same processing is possible for the third 
embodiment of the information recording medium according to the present invention, as long as the encrypted title key 
5 is replaced by the seed key, and the encrypted disk key is replaced by conversion table information of the scramble 
information sector. ' • J * 

In this embodiment, an SCSI bus is used for the bus connected to the optical disk drive 509. However, the bus is 
not limited thereto, and an interface such as an ATAPI or an IEEE 1394 can be used, as long as reproduction data can 
be transferred in accordance with a predetermined protocol. 

(Seventh Embodiment) ' . 

Next, an information reproducing device 1000 according to the present invention will be described. 

Figure 19 is a block diagram showing the structure of the information reproducing device 1000 according to the 

is present invention. The information reproducing device 1 000 is an optical disk player. The components of the information 
reproducing device 1000 are the same as-those of the information reproducing device shown in Figure 14 or the infor- 
mation reproducing device shown in Figure 17, except for a program ROM .1 001 : Therefore, the same components bear 
the same reference numerals, and the description thereof is .omitted.- The description .herein is. based on the fourth 
embodiment of the information recording medium. ■■ ,» 

20' At the time of the reset or disk' insertion in the optical disk player 1000, the microcontroller 702 controls the data 
reproduction circuit 606 and reads a scramble information sector of a lead-in area of the optical, disk. An encrypted.disk 
key information read from the' scramble information sector is transferred to the descramble circuit 705 and internally 
retained. - * - . ■• ■ - . , - 

On the other hand, in reproducing a scrambled file recorded in the optical disk.607, the. microcontroller 702 controls 

25 * the data reproduction circuit 606, reads an encrypted- title key: from a sector header field of the scrambled file to be 
reproduced, and transfers it to the descramble circuit 705.The:descramble.circuit 705 stores the received title key and 
judges use identifying information. As a result of th ^determination! inthe case reproduction is prohibited, the descram- 
ble circuit 705 reports an error to the microcontroller 702.:On the other hand, in. the case where the descramble circuit 
705 determines that reproduction is permitted, the data^reprbduction circuit 606 reads data of the, scrambled file, and 

30 transfers the read scrambled data to the descramble circuit 705. The descramble circuit 705 descrambles the scram- 
bled data using a disk key and a title key-previously stored; and transfers the result to the audio/video decoder circuit 
706. The audio/video decoder circuit 706 converts the received data to an analog AV signal and, performs audio/video 
outputs. 

In this manner, the optical disk player 1000 can descramble the scrambled data for reproduction. However, the opti- 
cs cal disk player 1 000 is different from the fifth and. the sixth embodiments of the information reproducing device of the 
present invention in that it performs video reproduction without executing; the mutual authentication processing. This is 
because, since reproduced data is directly input to the audio/video decoder circuit 706 in this embodiment, a copy oper- 
ation to other rewritable media sucrvas a hard disk drive cannot be performed in the middle of ..the procedure, and thus 
the mutual authentication processing is not required. Therefore, in the structure of this embodiment, without the com- 
40 pbnent which executes'the mutual authentication processing, the copyright protection is possible. Furthermore, since 
the optical disk player 1000 judges use identifying' information at the time of reproduction, data whose reproduction is 
prohibited for its use can be prevented from being reproduced;: '* ■ j , . 

Hereinafter, the further detailed structures and operations of a decoder authentication circuit 601 , a drive authenti- 
cation circuit 701 and a descramble circuit 705, which are used in the f ifth and the sixth embodiments of the information 
45 reproducing device of the present invention, will be described. The str ucture described below is a structure common to 
the fifth embodiment, sixth embodiment and seventh embodiment. 

First, the structure and the operation of the descramble circuit 705 with be described with reference to the accom- 
panying drawing. The descramble circuit 705 highly depends on a scramble system, so that the structure in the case of 
reproducing the third embodiment of the information recording medium of the present invention is different from that in 
so the case of reproducing the fourth embodiments of the information recording medium. Therefore, in the following 
description, the descramble circuit for reproducing the third embodiment of the information recording medium of the 
present invention will be described with reference to Figures 20 and 21. The descramble circuit for reproducing the 
• fourth embodiment of the information recording medium of the present invention will be described with reference to Fig- 
ures 22 and 23. - 
55 Figure 20 is a block diagram showing the structure of the descramble circuit 1 1 06 for reproducing the third embod- 
' imertt of the information recording mediuWv of the* present invention; Hereinafter, each component will be described. 
Reference numeral 1100 denotes an I/O control circuit for performing communication with the control bus 704. Refer- 
ence numeral 1 101 denotes a selector for switching a block to which an output is directed (hereinafter, referred to as a 
targeted block for output), depending on the content of the input data. Reference numeral 1102 denotes a use iderrtify- 
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ing circuit for determining whether or not reproduction is permitted, referring to the use identifying information of a repro- 
duction file. Reference numeral 1103 denotes a, conversion -table memory circuit for storing a conversion table to 
generate preset data for a random number generating circuit 1 1 04 from the seed key. Reference numeral 1 1 04 denotes 
the random number generating circuit for generating a random number based on preset data output from the conversion 

5 table memory circuit 1 103. Reference numeral 1105 denotes a main data descramble circuit for performing descram- 
ble-processing by performing a logical operation between the random number generated by the random number gen- 
erating circuit 11 04 and scrambled data input from theselector 1101. , , 

Next, the operation of the descramble circuit 11 06 wifl be described. - ■ . , . 

First, in the case where a scramble information sector recorded in the lead-in area is, to be read after the mutual 

70 authentication processing is normally ended, a scramble information sector readout is set to the selector 1101 via the 
I/O control circuit 1100, and the selector 1101 sets a targeted block for output to the conversion table memory circuit 
1 1 03. Read data which is input is supplied to the conversion table memory circuit 1 1 03 via the selector 1 1 01 , and stored 
as a conversion table for determining preset data which is to be usedras an initial; value for the random number gener- 
atioa -o - . ■ 

is - On the other hand, at the time of reproducing a saambtecM ile, mutual authentication processing is performed prior 
to reproduction Of data, anduse identifying information aathe sector header field received after normal end of the mutual 
authentication processing is input to 'the Use identifying, circuit 1 102, and theseed key is input to the conversion table 
•memory circuit 11 03. The use identifying circuit 1102 internally has information regarding the use identifying informa- 
tion which is permitted to be reproduced, identif ies whether or not the reproduction is permitted by comparing itwith the 

20 input use identifidationinformation, and repbrts the i/O control-circuit 1100 and the main data descramble circuit 1105. 
On the other hand, 5 the conversion table memory circuit 1103 which -receives. the seedkey outputs a preset data corre- 
sponding to the seed key based on the received seed key to .the random number generating circuit 1 1 04 f The random 
number generating circuit 1 1 04 generates a random number sequence based on the received preset data an<J outputs 
it to the main data descramble cifcuiM 105 Following the sector headenfield; when the main data of the scrambled sec- 

25 tor is td be input, a targeted block for output of the selector 1101 is switched to the main data descramble circuit 1105. 
Thereafter, the main data descramble circuit 1105 executes descrambleiDrqcessing by performing a logical operation 
between;the main data input from the selector 1 tO^and irte random number sequence input from the random number 
' generating [circuit 11 04. and outputs descrambleddata to the:audioA/ideo decoder circuit 706.. . , \ 

' *: •■ The operation described above will be explained in. greater; detail wsith reference to.Figure 21 below. 

30'- Figure 21 is a flow chart explaining the conten^the descramble-processing in the descramble circuit 1 106, in the 
"case where the third embodiment of the information recording medium of the present invention is reproduced. Each 
step will be described below. - : . - - 

: (S1200): A targeted block for output of4he selector- 11 01v is switched to the conversion table memory circuit 1103, 
35 . and a conversion table" read'from the scramble information sector of the lead-in area of the information recording 
• "-'V medium is stored in the conversion table memory 1103; 

• ' ■ (S1201): A targeted block for output of the selector 101 is switched to the l/Oxontrol circuit 1100, and a scramble 
1 c flag in the sector header received prior to reproduction .of the scrambled.f ile ; is transmitted back to the microcontrol- 
40' ler 702: The microcontroller 702 determines whether or ncrt the scramble flag is 1, and transmits back the deter-, 
mined result to the I/O control circuit 11 00:. When it is r determined that the scramble flag is 1 . the procedure goes 
to step (S 1 202). When it is determined that the scramble flag is 0, .the procedure goes to step (SI 206) with the func- 
tion of the main data descramble circuit 1105 stopped, x . 

4& ' (S1202): A targeted block for output; of the selector 1101 is switched to the use identifying circuit 1102, and use 
identifying information in the sector header receivedprior to reproduction of the scrambled file is transferred. The 
use identifying circuit 1102 determines whether or. not reproduction of the file is permitted, by comparing the 
— received use identifying information with reproduction permission information internally retained. When it is deter- 
mined that reproduction is prohibited, the procedure>goes to step (Si 203). When it is determined that reproduction 

so - is permitted, the procedure goes to step (S1204). ' •:. / . . 

(51203) : In -the 'Case where it is determined at the above processing step (S1202) that reproduction of the f ile is 
prohibited/an error is reported to the microcontroller 702 via the I/O control circuiM 100. in this step,; and the 
processing is ended. 

(51204) : A seed key read from the sector headerof the scrambled file to be reproduced is input to the conversion 
table memory circuit 1 1 03. and preset data is generated from the seed key and the conversion table and output to 
the random number generating circuit 1104. . ■ . 
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(S1205): A targeted block for output of the selector 1 1 01 is switched to the main data descramble circuit 1 1 05, and 
main data of an input scrambled file is transferred to the main data descramble circuit 1 1 05. On the other hand, the 
random number generating circuit 1104 generates a random number sequence based on preset data input from 
the conversion table memory circuit 1103 and outputs it to the main data descramble circuit 1105. The main data 
5 descramble circuit 1 1 05 executes descramble-processing by performing a logical operation between the input main 

- data and the random number sequence. - — 

. (S1206): The main data descramble circuit 1 1 05 outputs descrambled data at the time of executing the descram- 
; bling, and outputs data input fro.nvthe selector 1*101 as it as when the descramble function is stopped, to the 
10 : audio/video decoder circuit 706. ; 

As described above, the descramble. circuit 1 105 includes the use identifying circuit, so that it is possible to selec- 
tively reproduce a file having the use identifying information for which reproduction is prohibited and a file having the 
use identifying information for which reproduction is permitted. 

15 Furthermore, the descramble circuit 1106 internally includes the selector for separating a scramble identification 

flag, so that it is possible to separate only a scramble.flag so as .to determine whether or not to perform descrambling. 

Furthermore, since a conversion table for converting to preset data can be determined in a cihit of disk, and a seed 
key can be determined in a unit of file, 'it is possible reproduce the information recording medium having a scramble sys- 
tem with security so high that reproduction cannot be made without both of the two data. 

20 Figure 22 is a block diagram showing the structure of the descramble circuit 1 308 for reproducing the fourth embod- 

iment of the information recording medium of the present invention. Hereinafter, each component will be described. 
Reference numeral 1300 denotes an I/O control circuit for performing communication with the control bus 704. Refer- 
ence numeral 1301 denotes a selector for switching a targeted block for output, depending on the content of the input 
data. Reference numeral 1302 denotes a disk key decrypting circuit for decrypting an encrypted disk key in the case 

25 where the encrypted disk key is input. Reference numeral 1 303 denotes a master key storage section for storing a mas- 
ter key to be used for decrypting the encrypted disk key in a hardware manner. Reference numeral 1304 denotes a sec- 
tor header decrypting circuit for receiving a diskkey decrypted by -the disk key decrypting circuit 1302, and decrypting 
the encrypted section in the sector header. Reference nurneral 1305 denotes a CGMS checking circuit for confirming 
conformity between an original CGMS data decrypted bythe sector header decrypting.circuit 1304 and-media CGMS 

30 data input from the selector. Reference numeral 1 306 denotes a ajse.identifying circuit for receiving use identifying infor- 
mation decrypted by the sector header decrypting circuit 1304 and determining whether or- not reproduction is permit- 
ted. Reference numeral 1307 denotes a main data scramble circuit for descrambling main data input from the selector 
1 301 based on the title key input from the sector header decrypting circuit 1 304. 
Hereinafter, the descramble circuit 1308 will be described- 

35 First, in the case where a scramble information sector recorded in the lead-in area is read after the mutual- authen- 
tication processing is normally ended, a targeted block for outpufcof the selector 1301 is set to the disk key decrypting 
. circuit 1302 via the I/O control circuit 1300; and input read data is input to the disk key decrypting circuit 1302 via the 
selector 1301 . The disk key decrypting circuit 1 302 decrypts a disk key based on the master.key input from the master 
key storage section 1303, and the disk key is stored in the disk key decrypting circuit 1302. - 

40 On the other hand, at the time;of reproducing a scrambled file, the mutual authentication processing is performed 
prior- to reproduction of data. When the mutual authentication processing is'normally ended, the sector header, of the 
scrambled file to be reproduced is input to the' selector- 1301. The selector .13011 selects a targeted block for output 
thereof for every content of the sector header,- and outputs 1 a scramble flag to the microcontroller 702 via the I/O control 
circuit 1300, outputs media CGMS data to the CGMS checking circuit 1305,: and outputs encrypted original CGMS data 

45 and encrypted use identifying information and iencrypted title key (hereinafter, referred to as an encrypted sector header 
in combination) to the sector header decrypting circuit 1304. The sector header decrypting circuit 1304 receives disk 
key from the disk key decrypting circuit 1 302, decrypts the encrypted sector header based on the disk key. and outputs 
the original CGMS data to the CGMS checking circuit 1305, outputs use identifying information to the use identifying 
circuit 1306, and outputs the title key to the main data descramble circuit 1307. The CGMS checking circuit 1305 

so receives media CGMS data input from the selector 1301 and the original CGMS input from the sector- header decrypt- 
ing circuit 1304, and determines whether or not the value indicates that reproduction is permitted. At this time, criteria 
of the determination of the CGMS checking circuit 1305 are shown in (Table 2). (The meanings represented by the 
: media CGMS data and the original CGMS data are consistent with the explanation of the fourth embodiment of the 
* information recording medium of the present invention:) ' . 

55 " * " ' . - ' - * ' * ; . . * ■■ 
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Medium identification informa- 
tion 


Media CGMS data ; 


Original CGMS data 


CGMS determination 
information 


1 (Reproduction only medium) 
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00 
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00/01/11 
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» ■ • 10 -* 




■( -| 


00/01/10 


0 " 


* .<■ : ...11' ■■ . 1 • 


- . 1 


0 (Rewritable medium). 

{ " ' ,'■ " 


; ( oo 5 ; . 


" 00 


- - ! 1 ' 1 


* - 00/10/11 c 


• : . ; 0 


01/to • ; ' 


\ 00/61/16/11- 






10 .-, 


-. -.1 


00701/11 


i 0 



In Table 2, in the case where the CGMS determination information represents 1 , the CGMS checking circuit reports 
to the main data.descramble circuit.1307 and the microcontroller 702 that reproduction is possible. On the other hand. 
- in the case where the CGMS dfetermination Jnfotmation represents p. which is an inappropriate value indicating that ille- 
: gal copyings the like is possibly; made, the CGMS checking circuit reports an error to the main data.descramble circuit 

30 1307 and the microcontroller 702. For example, in Table, 2; in the case where the medium identification information isO 
indicating a rewritable medium, the media CGMS data is 11 showing copy prohibited, and the original CGMS data is 10 
showing one copying permitted, < fcis belreveid that a file which is permitted to be copied only once has been already cop- 
ied once to a rewritable medium, so that only the media CGMS data becomes 1 1 , and the f ile is changed to be prohib- 
ited from being copied. Therefore, the output is 1 meaning that reproduction is permitted.. On the other hand, if the file 

35 which is permrtted to be copied once is illegally copied, both of the media CGMS data and the original CGMS data 
become .1 0 meaning that only one copying is permitted Therefore, the CGMS determination information is 0 meaning 
that reproduction is prohibited. On the other hand;,tbe use .identifying circuit 1306, internally includes use identifying 
information for which reproduction is permitted/ and: determines whether, or not the scrambled file is to be used for 
something whose reproduction: is permitted, by comparing the information with the use identifying information input 

40 from the sectorheader decrypting circuit 1304. In thecase of th^ use identifying information for which reproduction is , 
not permitted, an error is reported to the microcontroller^^- and the main;data descramble circuit 1 307. In the case 
where the data of the scrambled file is to be reproduced, a targeted; blpck for output of the selector 1301 is switched to 
the main data descramble circuit 1 307,: and read data which is input is-transf erred to the main data descramble circuit 
1307: The main data descramble circuit 1307 .receives the titJe.key fronvthe sector header decrypting circuit 1304 and 

45 performs descramble-processing oithe Scrambled data based on, the received title key to output to the audio/video 
decoder circuit 706. , 7 , 

As described above, the descramble.circuit 1 308 decrypts;the encrypted disk key and the encrypted title key. per- 
forms descramble-processing for the main data when the title key indicates that reproduction is permitted, and outputs 
scrambled digital AV data to the audio/video decoder circuit 706;: 

so Next, the operation of reproduction processing of thescrambled file in the descramble circuit 1 308 will be described 
with reference to the flow chart shown in Figure 23. Processing cqntentat each stepis shown below. 

(51400) : In the case where the encrypted disk key; information in the lead-in area is input to the read data, a- tar- 
geted block for output of the selector 1 301 is set to the disK.key, decrypting circuit 1 302. and the encrypted disk key 

55 is transferred to the disk key decrypting circuit 1302. The disk key decrypting circuit 1302 receives a master key 
from the master key storage section 1 303, and decrypts the encrypted disk key and outputs the decrypted disk key 
to the sector header decrypting circuit 1 304. 

(51401) : The selector 1301 separates a scramble flag from the sector header of the scrambled file read prior to 
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reproduction, and transfers it to the microcontroller 702 via the I/O control circuit 1300. The microcontroller 702 
determines whether or not the scramble flag is 1 . When the determined result is 1 , the procedure goes to step 
" (S1 402). When the determined result is not 1, the procedure goes to step (Si 40 7). 

5 ' (S1402): The selector 1301 separates an encrypted sector header from the sector header of the scrambled file 
read prior to reproduction, and transfers it to the sector header decrypting circuit 1304. The sector header decrypt- 
ing circuit 1304 decrypts the received encrypted sector header based on a disk key previously received from the 
. disk key decrypting circuit 1 302, separates it by its content, and outputs original CGMS data to the CGMS checking 
: circuit 1305, outputs the use identifying information to the use identifying circuit 1306, and outputs the title key to 
10 ' the main data descramble circuit 1 307. . ... 

(Si 403): The CGMS checking circuit 1305 outputs CGMS determination information in accordance with Table 2 
from medium identifying information received from the microcontroller 702. media CMGS data received from the 
selector 1301 and original CGMS data received from the sector header decrypting circuit 1304. In Table 2, in the 
is case where GGMS determination information is 1 , the CGMS checking circuit reports to the I/O control circuit 1 300 

and the main data descramble circuit 1 307 that it is a normal CGMS control information. , : t . . , 

* (S1404): In the case where the CGMS determined result is 0, the CGMS checking circuit 1305 reports an error to 
the I/O control circuit 1 300 and the main data descramble circuit 1 307. In the case where theuse identifying infor- 
ms mation indicates that reproduction is prohibited for its use, the usejdentifying circuit 1306 reports an error to the I/O 
control circuit 1 300 and the main data descramble circuit 1 307. Thus, the reproduction processing is. ended. 

(51 405) : The use identifying ^circuit 1306 determines the use identifying information received from the sector 
header decrypting circuit 1304, and in the case where reproduction is. permitted, the use identifying circuit 1306 

25- reports to the I/O control circuit 1300 and the main data descramble circuit 1307 that the file is one whose repro- 
duction is permitted. . j- ... : - - . 

(51406) : When the selectorl301 receivesfthe main?data.of a scrambled file as readout-data, the main data 
descramble circuit 1 307 is set as a targeted block for output thereof, and the main data is transferred thereto. The 

30 ; main data descramble circuit 1 307 executes descramble-processing of the input main data, based on the title key 
received from the sector header decrypting. circuit 1 304. ... i 

(51407) : In the case where the main data descramble ;circuit 1307 has executed the descramble-processing, the 
descrambled main data is output to the audio/video decoder circuit 706. In the case where the main data descram- 

35 ble circuit 1307 has not executed the descramble-processing, the data input from the selector 1301 is output as it 
as to the audio/video decoder circuit 706. <. -. ..-. . .. 

As described above, the descramble circuit 1 308 includes the use identifying circuit, so that it is possible to selec- 
tively reproduce a file having the use identifying information for which reproduction is prohibited. and a.file having the 
40 use identifying information for which reproduction ispermittedt t ' . * . u > ■ . ■ , .. . 

Furthermore, the descramble circuit 1308 internally Includes, the selector for separating a scramble identification 
flag, so that it is possible to separate. only a scramble flag so as.to determine whether or not to perform descrambling. 

Furthermore, even for a disk of high security, which is hierarchically encrypted/scrambled, such as the fourth 
embodiment of the information recording medium of the present-invention, by allowing the disk key decrypting circuit, 
45 the sector header decrypting circuit, the main data descramble .circuit to operate in association with each other, the pro- 
cedure can be the same as that when descrambling is not performed. 

Furthermore, the descramble circuit includes the CGMS checking circuit 1305. so that illegally copied data can be 
detected, thus making it possible to prevent the illegally copied data from being reproduced. Furthermore, the descram- 
ble circuit has a mechanism which protects copyright of the information recording medium recorded a software which 
so allows for control the generation of copying, namely, how many times.data is copied, and permits only a predetermined 
- number of copying operations, r- * . 

Figure 24 is a block diagram showing the detailed structure of the decoder authentication circuit 601 in the optical 
disk drive 509. Hereinafter, each component will be described. Reference numeral 1500 denotes an I/O control circuit 
' for controlling input and output so as to perform communication with the.mierocontroller 602. Reference numeral 1501 
55- denotes a random number generating circuit for generating a random number, based on a time variable key input from 
the I/O control circuit 1 500. Reference numerals 502 denotes a function fk(R1 ) generating circuit for determining a func- 
tion fk by a first input (represented by k in Figure *24) for determining the -function, and calculating a function value 
fk(R1) from the second input (represented by R1 in Figure 24). which is an argument of the function fk, and outputting 
the function value fk(R1). Similarly, reference numeral 1503 denotes a function gk(R2) generating arid comparing cir- 
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cuit for calculating a function value gk(R2) from kand R2 and outputting the function value gk(R2) ( and comparing it 
with decoder response data input from the I/O control circuit 1500. Reference numeral 1504 denotes a bus key gener- 
ating circuit for generating a bus key. based on two-function values output from the function gk(R2) generating and com- 
paring circuit 1503 and the function fk(R1 ) generating circuit 1502. Reference numeral 1505 denotes a bus encrypting 
£ circuit for encrypting data output from the data reproducing circuit 606 in accordance with a bus key output from the bus 
key generating circuit .1504. ... 
Hereinafter, the operation of the decoder authentication eircuit601 will be described. 

At the time of reset and disk replacement for the optical disk drive 509, the microcontroller 602 previously sets a 
mutual authentication key k read from the sector header in the scramble information sector.in the lead-in area of the 
w disk to the function fk(R1) generating circuit 1502 and the function gk(R2) generating and comparing circuit 1503 via 
the I/O control circuit 1500. 

The function f k(R1 ) generating circuit 1 502 internally retains the mutual authentication key k. and thereafter calcu- 
lates a function fk(R1) when a random number value R1 is input at the time of mutual authentication processing, and 
T outputs the function fk(R1) to the bus key generating circuit 1504 and the l/Ocontrol circuiMSOO. 
is ' The bus 1 key generating circuit 1 504 internally stores this input function 1k(R1 ). Subsequently, in the case where a 
time variable key for generating a random number is input from theJimicrocontroller 602 via the I/O control circuit 1500, 
the random number generating circuit 1501 generates a random number R2 based on the time variable key and trans- 
mits back it to the I/O control circuit 1 500; and outputs it rtatha function, gk(R2) generating and.comparing circuit 1503. 
''* v The function gk(R2) generating and comparing circuiM603 which has received the random number R2 calculates 
co the function value gk(R2) from the mutual authentication key k previously retained and the random number R2, and 
internally retains it. Furthermore, the function gk(R2): generating; and comparing circuit 1503 receives decoder 
response data from the I/O control circuit 1 500, and compares it with internally calculated function gk(R2). As a result 
of the comparison, in "the case where the value of gk(R2) and the decoder response data are not matched, thejunction 
gk(R2) generating and comparing circuit 1503 reports that amerror occurs in the mutual authentication processing to 
25 the microcontroller 602 via the I/O control 1 circuit 1500: In the case where the mutual authentication. processing fails, the 
processing following the mutual authentication processing such as transfer of the encrypted disk key and the encrypted 
title key or the like are cancelled. 

• On the other hand, in the case where the two values?- gk(R2) . and the decoder response data, are matched, it is 
' determined that the mutual authentication processing is nco-rn&lly ended; /and the function value gk(R2) is output to the 
3o- r bus key generating circuit 1504. At this time, only in the case^where the -function values fk(R1 ) and gk(R2) are normally 
input, the bus key generating circuit 1 504 generates a bus kfey based on the two function values f k(R1 ) and gk(R2), and 
outputs the bus key to the bus encrypting circuit 1 505. 

The" bus encrypting circuit 1 505 receives a control signal for switching mode (hereinafter, referred to as a mode 
control signal) from the microcontroller 602 via the I/O control ^circuit 1500. When the mode is a disk key reproduction 
35 * mode or -a title' key reproduction mode, the bus encrypting circuits 505 performs a .predetermined encrypting to an 
encrypted disk key or an encrypted title key input from the data reproducing circuit 606, based on a previously input bus 
key. and then outputs the result to the SCSI control circuit 600. 

On the other hand, after supplying out the encrypted title key, in the case where an actual file data is to be supplied 
* out, the mode control signal is switched to the data reproduction mpde, andthabus encrypting circuit 1505 outputs the 
40 data output from the data reproducing circuit 606 to therSGSLJControl circuit 600 without encrypting. ; 

As described above, the decoder authentication circuit 601 calculates^ function value determined by the mutual 
authentication key in the mutual authentication process! n&arxl only in? the .case where the function value is matched 
- with the function value supplied' from the decoder; the mutual authentication processing is normally ended. Further- 
more, in the reproduction operation, at the time of transfer of the encrypted disk key and the encrypted title key„key 
45 information which is further encrypted using the bus key generated rn the-mutual authentication processing is supplied 

Next, the structure of the operation of the drive authenticatioh.drcuit 701 on.the AV decoder card 507 and the SCSI 
control circuit incorporated AV decoder card 801 will be described with reference to the accompanying drawings. 

Figure 25 is a block diagram showing the structure of the drive authentication circuit 701 . Hereinafter, each compo- 
se) nent will be described. Reference numeral 1600 denotes an VO control circuibfor receiving and .transmitting a control 
signal from and to the microcontroller 702. Reference numeral 1601 denotes a random number generating circuit for 
receiving a time variable key from the I/O control circuit 1SO0 so as, to generate a random number R1 and transmitting 
back it to the I/O control -circuit 1600 arid outputting it to a function fk(R1) generating and comparing circuit 1603. Ref- 
erence numeral 1 602 denotes a function gk(R2) generating circuit for calculating a function gk(R2) based on a constant 
55 k input from the function fk(R1) generating and cbrnparing circuit 1603 and the random number R2 input from the I/O 
control circuit 1600. Reference numeral 1 603 denotes a functiorifk(ffn) generating. and comparing circuit for calculating 
a function value fk(R1 ) with respect to k which is 1 to n. ba£ed on Ri input frorrtrthe random number generating circuit 
1601 and comparing it with drive response data input from th6' I/O controh circuit 1€J00. Reference numeral 1604 
denotes a bus'key generating circuit for generating a bus key from a function: value output from the function gk(R2) gen- 
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erating circuit 1602 and a function value output from the function fk(R1) generating and comparing circuit 1603. Refer- 
ence numeral 1 605 denotes a bus decrypting circuit for decrypting data by a bus key output from the bus key generating 
circuit 1604. 

Next, the operation of the drive authentication circuit 701 will be described. 

5 First at the start of the mutual authentication processing, the drive authentication circuit 701 receives a time vari- 

able key for a random number generation from the microcontroller 702 via the I/O control circuit 1600, and the random 
number is generated by the random number generating circuit 1601 . 

The random number generating circuit 1601 outputs the generated random number R1 to the function fk(R1) gen- 
erating and comparing circuit 1 603 and themicrocontroller 702. Thereafter, the function f k(R1 ) generating and compar- 

w ing circuit 1603 receives drive response data from the microcontroller 702, and calculates functions f1(R1). f2(R2), 
f3(R3) * • • using the random value R1 internally retained as an argument, and obtains k which allows the drive 
response data to be matched with fk(R1). At this time, in the case where k which allows matching with the drive 
response data is not obtained despite the calculation for all of the retained functions, the function fk(R1) generating and 
comparing circuit 1 603 transmits back an error to the microcontroller 702 via the I/O control circuit 1 600 as an authen- 

15 tication result. ■ ; 

On the other hand, in the case where k which allows the drive response data to be matched with f k(R1 ) is obtained, 
the function fk(R1) generating and comparing circuit 1603 transmits back a normal end to the microcontroller 702 as 
an authentication result, and outputs k to the function gk(R2) generating circuit 1602 and outputs the function value 
* fk(R1) to the bus key generating circuit 1604. In the case where the value of k is normally found out, the drive authen- 

20 tication circuit 701 subsequently receives the random number R2 from the microcontroller 702, and inputs it to the func- 
tion gk(R2) generating circuit 1602. The function gk(R2) generatingcircuit 1602 calculates the function gk(R2) from the 
value k previously received from the function fk(R1 ) generating circuit 1603 and the input random number R2, and out- 
puts the obtained function value to the microcontroller 702 and the bus key generating circuit 1 604. 

The bus key generating circuit 1604 generates a bus key based on the previously received function values fk(R1) 

25 and gk(R2), and outputs the bus key to the bus decrypting circuit 1 605/On the other hand, in the case where the func- 
tion value gk(R2) supplied to the microcontroller 702 is normally authenticated by the optical disk drive 509. the micro- 
controller 702 switches the mode control signal, and switches: the mode of the bus decrypting circuit 1605, to the disk 
key . reproduction -mode or the title key reproduction mode, .so\that the bus decrypting circuit is ready to be used for 
decrypting processing: . , . 

30 At this time, data (encrypted disk key or encrypted title key) input from the SCSI control circuit 900 or the system . 
interface circuit 700 is decrypted by the bus key previously retained in the bus decrypting circuit 1605. However, it is 
only the bus code that decrypted by the bus decrypting circuit 1605„and the encrypted disk key encrypted by the mas- 
ter key arid the encrypted title key encrypted by the disk key are output as encrypted they are to : the descramble circuit 
705. 

35 Thereafter, when reproduction data of a scrambled file is input from the SCSI control circuit 900 or the system inter- 
face circuit 700, the bus decrypting circuit 1605 is switched to the data reproduction mode by the mode control signal 
from the microcontroller 702, and transfers data to the descramble circuit 705 as it is without performing decrypting 
processing with the bus key. > i . . r . - ; .:. 1 

As described above, the drive authentication circuit 701 calculates a plurality of function values from the internally 
40 generated random number, and authenticates-the drive by the matching of the drive response data with either one of 
*- the plurality function values. On the contrary, by receiving the rarriorrvnumber and calculating the internal function val- 
ues to transmit back, the drive authentication circuifis authenticated by the optical disk drive 509. In this manner, the 
mutual authentication processing is performed. 1 . . - - r ; - 

Furthermore, for the reproduction operation, at the time of receiving. the encrypted disk key and the encrypted title 
45 key, decrypting processing is performed using the bus key generated in the mutual authentication processing. 

Next, the protocol of the mutual authentication processing executed in the fifth and the sixth embodiments of the 
information reproducing device of the present invention will be described, with reference to the accompanying drawings. 

Figure 26 is a flow chart for explaining the mutual authentication processing between the optical disk drive 509 and 
the AV decoder card 507 or the SCSI control circuit incorporated AV decoder card 801 . 
so The mutual authentication processing is. executed as necessary, such as at the time of reset of the apparatus and 
disk replacement, and when a file to be read is confirmed to be a scramblecUile by thefile managing information. Each 
step of processing will be described below. Hereinafter, the AV decoder card 507 or the SCSI control circuit incorpo- 
rated AV decoder card 801 are simply referred to as an AV decoder. Furthermore, hereinafter, a command on the SCSI 
—"protocol is referred to as a device 'commahd-.v. i---. v.-. 
55 • . . • - ■. '. - u --. 

(51 700) : The AV decoder generates a random number Rt based on a time variable key which is variable over time 
generated using a timer or. the like.. "..-*- r - 

(51701) : The optical disfcdrive receives the random number R1 generated by the AV decoder, by a device com- 
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mand "SEND R1\ At this time, when the optical disk drive has not stored a mutual authentication key k of the 

- mounted disk yet, readout of the mutual authentication key from the sector header field of the scramble information 
sector in the lead-in area is executed. 

5 (S1702): In the case where the optical disk drive detects an error during the procedure of step (S1701) and the 

error is reported, the procedure goes to step (S1713). When the step (S1701) is normally ended, the procedure 
goes to step (S1 703). >> .* 

(51703) : The optical disk drive receives a device command "REPORT fk(R1)*\ calculates a function fk(R1) based 
10 ■ on the previously received random value R1 and a value of the mutual authentication key k read from the disk, and 

- transmits the calculated result back to the AV decoder. In the processing described. above, in the case where an 
error occurs, the optical disk drive reports the error as a result of the command processing. 

(51704) : When an error occurs during the device command "REPORT fk(R1)** processing, and the command 
is processing result is an error, the procedure goes to step (S1713). When the processing result is a normal end, the 

1 procedure goes to step (S1 705)" • ^ . , - ; - , . • , . ,i 

^ (S1705): The AV decoder calculates a function valufe fi(R1) with respect to i (i is a positive integer) from 1 to n (n is 
a positive integer), using the internally 1 retairted function value. generating.. circuit, and compares the calculated 
20 value of fi(R1) with the 1 value of fk(R1)' transmitted from the optrcal disk drive in (S1 703). .When the -AV decoder 
detects the value of i which allows for fi(R1) = fk(R1 :■)& t&6 AV decoder internally retains the value. 

(51706) : In the processing step (S1705), in the case where the AV decoder cannot detect the value of i which 
allows for fi(R1) = fk(R1) /the procedure goes to step (S1713): In the case where the, AV decoder detects the 

25 value, the procedure goes to step (S1 707).., : v • • ■•■ . t ■ ■ ; 

(51707) : The optical disk drive receives- a^deN/iceicommandv "REPORT R2" command, and generates a random 
" ' ~ number based on a time variable key which is Variable oveniime in the internal random number generating mech- 
anism and transfers the random number to the AV decoder. In this step, in the case where the optical disk drive 

30 ' detects an error, the error is rieported. ' : iy. : ' ' : ■ > 

" (S1708): In the step (S1707), in the process ot executing the "REPORT R2" command, in the case where an error 
occurs, the procedure goes to step (S1713). 1nthe<case where the step is normally ended, the procedure goes to 
step (S1 709). 

■ (S1 709) :Jn the step (Si 708), the AV:decoder which 1ias received the random R2 which the optical disk drive gen- 
\ erates by the "REPORT R2" command calculates a function value gk(R2) based on a constant k (= i) already 
stored in step (S1 705) and the random value R2 received from the optical disk drive in step (S1 707). 

40 (Sl710):The AV decoder which has calculated ?thQ: function value gk(R2) executes a device command, "SEND 

- gk(R2)"commarid; arid transfers ^ 

cal disk drive which has received the function valtie: gk(R2)xalculates.gk(R2) using. the mutual authentication key 
k and the random number R2 in the function calculating circuit included therein. , Thereafter, the optical disk drive 
compares the function value gk(R2) received from the ;AV decoder.and the gk(R2) calculated by the internal calcu- 
45 lating circuit. In the Case where the two values are matched, a nprmal end is reported as the processing result. On 
the other hand, in the case where an error opcurs during the'command processing, or in the case where the 
received function value is not matched with the internally calculated function value, an error is reported as the com- 
mand processing result. ..v . • . ;,: 

so - (S1 71 1) : In the step (SI 710), when thecommand processing result is aherror, the procedure goes to step (S 171 3). 
When the command processing result is a normal end /the procedure goes to step (51712). 

(S1712): The AV decoder generates a bus key BK using the internally retained bus key generating circuit, based 
on the two function values fk(R1) and gk(R2) acquired in the mutual authentication processing. Similarly, the opti- 
55 cal disk drive also generates a bus key BK using the internally retained bus key generating circuit, based on the 
two function values acquired in the mutual authentication processing. (Herein, the bus keys BK generated by the 
optical disk drive and the AV decoder in the mutual authentication processing are identical:) 

(ST713): In the case where an error occurs during the execution otthe device comrnand, the error is reported and 
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the mutual authentication processing is cancelled in this step. : . 

By performing the mutual authentication processing in the manner as described above, key information can be 
transferred after the optical disk drive confirms that the data is not to be transferred to an apparatus which performs ille- 

s gal copying. Thus, there is an effect of concealing the key information for performing descrambling. Therefore, an effect 
of preventing the scramble system from being illegally decrypted can be provided. 

Furthermore, since it is possible to perform decrypting of key information and descrambling of data after confirming 
that the apparatus from which the AV decoder receives data does not transfer illegally copied data, an effect of prevent- 
ing illegally copied data from being reproduced can be provided. 

io Furthermore, since a different bus key for every mutual authenticationprocessing is generated, effects of prevent- 
ing the key information from being illegally read and preventing the encrypting/scrambling system from being illegally 
decrypted can be provided. 

Furthermore, since different functions are used between in the case where the optical disk drive authenticates the 
AV decoder in the mutual authentication and in the case where the AV decoder authenticates the optical disk drive, the 
js security against the act of decrypting the mutual authentication operation system for the purpose of illegally executing 
the mutual authentication operation is high. - ■ • 

Furthermore, in the mutual authentication processing, since time variable^keys generated by each of the optical 
disk drive and the AV decoder are used, different random number values are generated every time the mutual authen- 
tication processing is executed, different function values are transferred, and different bus keys are generated. There- 
to fore, the security against the act of decrypting the mutual authentication. operation system for the purpose of illegally 
executing the mutual authentication operation is high. 

Furthermore, by using the mutual authentication key recorded on the information recording medium for the mutual 
authentication processing, the security against the act of decrypting the mutual authentication operation system for the 
purpose of illegally executing the mutual authentication operation is high.* 
25 Although the fourth embodiment of the information recording medium of the present invention has been described 
above as an example, the third embodiment of the information recording medium of the present invention can be proc- 
essed in the same manner. . 1 . :—y * ■ ». 

INDUSTRIAL APPLICABILITY " ■: . ■ . ; - .-. ■ ....... . ' ; 

30 

The information recording medium of -the present: invention includes a lead-in area and a data recording area. 
Scrambled data recorded in the data recording area is descrambled based on the key information recorded in the lead- 
in area. Thus, by recording the key-information in the lead-in area, security is enhanced. This is because the drive 
device of the information recording medium can directly access the lead-in area, while devices other than the drive 

35 device (e.g., a personal computer) cannot directly access the lead-in area.. Furthermore, by recording the key informa- 
tion in the lead-in area, it is unnecessary to provide readout means dedicated to. reading the key information. 

Another information recording mediums of the present invention includes the lead-in area and the data recording 
area. Scrambled data is descrambled based on the first key information recorded in the lead-in area and the second 
key information recorded in the data recording area. Thus; since the key information for descrambling is doubled, secu- 

40 rity is enhanced. > : : . , . 

According to the information reproducing device.of the present invention, the mutual authentication processing is 
performed before the scrambled data is transmitted to the decoding device: By the mutual- authentication processing, 
two components mutually confirms that the other is normal. Thus, security is enhanced. 

According to the information reproducing device of the present invention, the mutual authentication processing is 

45 performed between the reading device and the decoding device. When the mutual authentication processing is nor- 
mally ended, the bus key information -common to the reading device and the decoding device is generated, and key 
information encrypted by the bus key information is transmitted from the reading device to the decoding device. In this 
manner, after the mutual authentication processing is performed, the common bus key is further used, so that it is mutu- 
ally confirmed that the other is normal. Thus, security is enhanced. 

so - c . - 

Claims 

1 . An information recording medium comprising a lead-in area and a data recording area, wherein 
• key information is recorded in the lead-in area, . " 

55 scrambled data is recorded in the data recording area, and 

the scrambled data is descrambled based on the key information. 

2. An information recording medium comprising a lead-in area and a data recording area, wherein 

first key information is recorded in the:lead-in areai 
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second key information and scrambled data are recorded in the data recording area, and 
the scrambled data is descrambled based on information obtained by converting the second key information 
based on the first key information. 

An information recording medium according to claim 2, wherein the data recording area is divided into a plurality of 
sectors, each of the plurality of sectors including a sector - header field where information for identifying the sector 
is recorded and a main data field where the scrambled data is recorded, and the second key information is recorded 
in the sector header field. ;...>.. 

An information recording medium accordingto claim 2, wherein the second key information is encrypted by the first 
key information, and the information is obtained by decrypting the encrypted secondkey information. 

5. An information recording medium according to claim 4, wherein the first key information is encrypted by master key 
information.^ -• » 

is .« • \. / i ■ . 

6. An information recording medium according to claim 4, wherein a plurality of first key information is recorded in the 
lead-in area, and the plurality of f irst key information are encrypted by a plurality of different master key information. 

' 7. An information recording medium according to claim 2, wherein a scramble flag for indicating whether or not data 
do- . < recorded in the data recording area is scrambled. is further recorded in the information recording medium. 

8. "An information recording medium according to claim 7, wherein the.data recording area is divided into a plurality of 
sectors, each of the plurality of sectors including.a sectorheader field where information for identifying the sector 
is recorded and a main data field where the scrambled datais recorded,, and the scramble flag is recorded in the 

25 *'- sector headerfield. ' ' * ;• . * 

9. An information recording medium according to claim 7, wherein the data recording area includes an area where a 
plurality of files are recorded and a file management area where information for managing the plurality of files is 
recorded, and the scramble flag is recorded in the file management area. 

30 

" 1 0: An information recording medium according to claim 2; wherein mutual authentication key information for perform- 
. • > ingimutual authentication between a reading device for readingihe scrambled. data and a decoding device includ- 
: ing a ; descramble circuit for descrambling the scrambled data is further recorded in the !ead-in area. 

35- 1 1. An information recording medium according to claim 2, wherein the information is an initial value for generating a 
random number sequence, and the scrambled data is descrambled by performing a logical operation to the random 
\ '*"■•■ number sequence. *• ^ " ■ - i . ■ - . v \ 

"12: Ah informatidn recording medium According torlaim 2v wherein *he data recording area is divided into a plurality of 
40 sectors, each of the plurality of sectors including a sector header field where information for identifying the sector 
is recorded arid a main data field where the scrambled data is. recorded, and information for identifying use of the 
' information recording medium is recorded in the sector, header field ; = 

13. An information reproducing device comprising; ;.^ ~ r . . ; 

a reading circuit for reading scrambled data and key:information.to be used for descrambling the scrambled 
data from an information recording medium; and » - c 

an authentication circuit for authenticating to transmit information corresponding to the key information to the 
decoding device before transmitting the scrambled data to the decoding device including a descramble circuit 
so for descrambling the scrambled data. 

14. An information reproducing device according to claim 13, 

wherein the information recording medium includes a lead-in area and a data recording area, and 
the key information includes first key information retarded in the lead-in ^area and second key information 
55 recorded in the data recording area. < c 

15. An information reproducing device comprising: 

an authentication circuit for authenticating to receive information corresponding to key information from a read- 
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ing device before receiving scrambled data from the reading device for reading the scrambled data and the key 
information to be used for descrambling the scrambled data from an information recording medium; and 
a descramble circuit for descrambling the scrambled data received from the reading device. 

5 16. An information reproducing device according to claim 15, 

wherein the information recording medium includes a lead-in area and a data recording area, and 
the key information includes first key information recorded in the lead-in area and second key information 
recorded in the data recording area. 

io 17. An information reproducing device according to claim 16; wherein the descramble circuit descrambles the scram- 
bled data based on information obtained by converting the second key information based on the first key informa- 
tion. 



18. An information reproducing device comprising: 



15 



a reading circuit for reading scrambled data and key information to be used for descrambling the scrambled 
data from an information recording medium; 

a decoding section including a descramble circuit fordescrambling the scrambled data; and 
an authentication circuit for authenticating to transmit information corresponding to the key information to the 
20 decoding section before transmitting the scrambled data to the decoding section. 

* ? ' . 1 

19. An information reproducing device according to claim 1 18, wherein the information recording medium includes a 
lead-in area and a data recording area, and - ' 

the key information includes first key information recorded in the lead-in area and second key information 
25 recorded in the data recording area. 

20. An information reproducing device according to claim 19, wherein the descramble circuit descrambles the scram- 
bled data based on information obtained by converting the second key information based on the first key informa- 
tion. 

30 . . '. _ . . 

21 . An information reproducing device according to claim 1 8, wherein a scramble flag for indicating whether or not data 
recorded in the data recording area is scrambled is further recorded in the information recording medium, 

the information reproducing device further comprising a control circuit for controlling whether or not the 
authentication circuit is to be activated depending on the scramble flag. 

35 

22. An information reproducing device according to claim 1 8, wherein authentication by the authentication circuit is per- 
formed by using a predetermined function. 



23. An information reproducing device according to any one of claims 13, 15 and 18, wherein authentication by the 
40 authentication circuit is performed by using information changing over time. 

24. An information reproducing device according to claim 19, wherein the authentication circuit generates bus key infor- 
mation in the case where authentication processing is normally ended, and encrypts the first key information and 
the second key information using the bus key-information. :■..».■ 

45 " 

25. An information reproducing device according to claim 24," wherein the authentication circuit decrypts the encrypted 
first key information and the encrypted second key information using the bus key information. 

26. An information reproduction method for reproducing scrambled data using a reading device for reading scrambled 
so data and the key information to be used for. descrambling. the scrambled data from an information recording 

medium and a decoding device including a descramble circuit for descrambling the scrambled data, the method 
comprising the steps of: « . j . . ' , . . 

performing mutual authentication processing between the reading device and the decoding device; 
55 generating bus key information common to the reading device and the decoding device in the case where the 

mutual authentication processing is normally ended between the reading device and the decoding device; 
encrypting the key information in accordance with the bus key information; and 
transmitting the encrypted key information from the reading device to the decoding device. 
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FIG. 7 
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FIG. 12 
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